VAPOR PANDA Uses AI-Driven ARTEX to Scale a Global Espionage Campaign

Beginning October 17, 2026, CrowdStrike OverWatch observed VAPOR PANDA utilizing the ARTEX AI framework alongside the Chinese-developed DeepSeek large language model and a second commercial LLM to conduct intrusions against multiple high-value targets simultaneously. The operation represents a significant escalation in China-nexus use of AI agents, shifting from single intrusions to multiple simultaneous engagements directed by human operators.

The campaign targeted more than 200 distinct organizations worldwide, including foreign ministries in Latin America, Europe, Asia, and the Middle East; semiconductor, defense, and think tank organizations in the U.S.; and telecommunications providers in multiple regions. CrowdStrike confirmed post-exploitation activity at nine organizations, where the adversary gained access, deployed the BLOODALCHEMY backdoor, and conducted follow-on reconnaissance.

Targeting Strategy

VAPOR PANDA conducted extensive intrusions at foreign ministries of two Latin American countries, likely compromised a third, and staged files for attacks against ministries in Central America and Asia. The operation also compromised a Middle Eastern interior ministry and targeted a single European country's foreign ministry, presidency, prime minister's office, and defense, justice, finance, and intelligence entities. A separate engagement focused on 19 U.S.-based organizations in pharmaceutical, semiconductor, defense, nuclear, and financial sectors.

AI-Driven Operations

The campaign demonstrates how adversaries can assemble scalable, multi-agent intrusions largely from publicly available resources. VAPOR PANDA ran ARTEX primarily with DeepSeek, supplemented with a second commercial LLM. In a single intrusion, planning agents consumed approximately 1.4 billion input tokens, indicating the scale of automated activity. The framework coordinates a main agent with subordinate planner and worker agents over a shared graph of facts, findings, and goals.

Recovered transcripts showed an operator issuing instructions in Chinese and directing agents to write web shells, extract domain administrator passwords, and inventory endpoint sensor coverage. The adversary incorporated sensor evasion directly into their workflow, instructing agents to identify hosts without the CrowdStrike Falcon sensor.

Technical Implementation

VAPOR PANDA deployed the BLOODALCHEMY backdoor at a Middle Eastern interior ministry and a Latin American foreign ministry. The adversary used a legitimate GameHook binary renamed svchost.exe to load a malicious DLL, graphics-hook-filter64.dll, which decrypted the BLOODALCHEMY payload. The implant carries an internal project path D:\ProjectX\Merman_New, likely reflecting its development name.

The campaign showcases multiple attack paths across web applications, cloud services, container environments, Active Directory, and mail infrastructure. At a U.S. pharmaceutical organization, the agent chained an unsigned SAML assertion and XXE flaw to query cloud metadata services. At another pharmaceutical firm, the agent deployed web shells and abused an unauthenticated orchestration service to obtain root access.

Future Implications

This operation marks VAPOR PANDA's first observed use of AI-driven intrusion tooling and represents a broadening of its targeting into pharmaceutical, semiconductor, nuclear, and defense sectors. The campaign is separate from ARTEX activity reported under Storm-0940, suggesting the framework is gaining popularity among multiple China-nexus adversaries.

CrowdStrike assesses that China-nexus adversaries will highly likely continue adopting agentic frameworks like ARTEX over the next 12 months, pairing them with commercially available LLMs to enable small teams to quickly scale intrusions across many targets simultaneously. Organizations should rotate credentials, enforce SAML validation, patch internet-facing appliances, and hunt for ARTEX indicators including command-line parameters and specific directory structures.