CrowdStrike report published October 29, 2026; campaign observed October 17 to 28, 2026
One Operator, Many Intrusions at Once: CrowdStrike Ties VAPOR PANDA to ARTEX Campaigns Against More Than 200 Organizations
CrowdStrike reported on October 29 that the China-nexus adversary it tracks as VAPOR PANDA used the ARTEX agentic intrusion framework to target more than 200 organizations in at least 14 countries over an 11-day window beginning October 17, 2026, with confirmed post-exploitation activity at nine organizations. The distinction matters: targeting is the reach of a single ARTEX controller that CrowdStrike OverWatch observed, while nine is the number of victims where access and follow-on activity could be established. At those nine, the adversary deployed the BLOODALCHEMY backdoor and moved into credential spraying, network scanning, and reconnaissance, and it ran password spraying and credential scanning against at least 12 more organizations, including United States based think tanks and European government entities. Targets included foreign ministries in Latin America, Europe, Asia, and the Middle East, a European presidency and prime minister office alongside defense, justice, finance, and intelligence entities, 19 United States organizations across pharmaceutical, semiconductor, defense, nuclear, and financial sectors, and telecommunications providers. ARTEX pairs a main agent with planner and worker agents sharing a graph of facts, findings, and goals, running primarily on the DeepSeek model with a second, unconfirmed commercial model; planning agents in a single intrusion consumed roughly 1.4 billion input tokens. A human operator stayed in the loop, issuing instructions in Chinese at decision points, including directing agents to find Windows machines without the Falcon endpoint sensor. In documented engagements, agents combined an unsigned SAML assertion with an XML external entity flaw to reach a cloud metadata service and a role able to issue administration commands to thousands of instances, planted web shells and reached root inside a production container environment through an unauthenticated orchestration service, and used authentication keys from a 2022 directory export, likely never rotated, to forge an administrator token and read mailboxes. CrowdStrike distinguishes this campaign from ARTEX activity reported under the Storm-0940 designation and assesses that China-nexus adversaries will highly likely keep adopting agentic frameworks over the next 12 months.
Executives
The staffing model is the story: one operator steering parallel intrusions changes the economics of espionage, because the limiting factor used to be skilled human hours. Nine confirmed intrusions out of more than 200 targets is not reassurance, it is the portion researchers could prove from an intermittently exposed controller. Ask which of your systems have no endpoint sensor at all, because that is exactly the list the operator told the agents to build.
CIO / CISO
Work the report recommendations as a checklist: rotate signing keys, preauthentication keys, and service credentials after any suspected exposure, including keys sitting in historical backups and old directory exports; enforce SAML signature validation; require IMDSv2 and limit cloud roles that can issue commands to the minimum instances; and confirm endpoint detection coverage includes servers considered unreachable from the internet. The 2022 export in this report is the cautionary case: credentials that were never rotated outlived the incident that exposed them by four years.
Engineers
Hunt for the markers CrowdStrike published: artx or artex strings in command-line parameters, artx-prefixed cloud roles, and the C:/ProgramData/artx5v/ directory, plus BLOODALCHEMY staging patterns such as a renamed GameHook binary loading graphics-hook-filter64.dll. Then close the specific doors used here: unsigned SAML assertions, XML external entity parsing, unauthenticated internal orchestration services, and metadata access without IMDSv2.
Everyone (non-IT)
Nothing in this campaign required tricking individual users at scale. It exploited old keys, unsigned login messages, and machines with no security sensor. If your workplace asks you to rotate credentials or installs a security agent on a server you manage, this report is the context: those steps remove the exact openings these agents walked through.