{"schema_version":"0.10.0","id":"LR-2026-0279","record_version":4,"title":"VAPOR PANDA agentic AI framework (ARTEX + DeepSeek) used for multi-target espionage campaign","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":62.6,"score_breakdown":{"source_authority":12.1,"independent_corroboration":15.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":6.0,"completeness":7.36,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-10-30","extraction_run_id":null,"evidence_level":{"level":"confirmed","reason":"2 independent outlets","original_document":null,"reports_total":2,"reports_independent":2,"reports_derivative":0,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-10-30","history":[{"date":"2026-10-30","from_level":null,"to_level":"preliminary","reason":"1 report: SecurityBrief Australia · subject to change"},{"date":"2026-10-30","from_level":"preliminary","to_level":"confirmed","reason":"2 independent outlets"}]},"sources_hash":"4d7e3146987a00b54e524cd585bc998e7d122722d8b3f65414ebbb56b717e0ad"},"system":{"model_name":"DeepSeek","model_version":null,"developer":"unknown","harness":"ARTEX","tools_granted":["web shell development","credential extraction","network scanning","lateral movement"],"permissions_scope":null,"autonomy_level":"supervised-auto","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":"agentic_with_tools","intended_use":"conducting simultaneous intrusions against organisations","safeguard_state":null,"production_intended":null},"event":{"date_occurred":"2026-10-17","date_disclosed":"2026-10-30","incident_class":"security_compromise","failure_class":null,"agent_involved":true,"secondary_failure_classes":[],"trigger":"human_misuse","duration":null,"detection_method":"third_party","summary":"China-linked threat actor VAPOR PANDA used ARTEX, an open-source agentic AI framework running DeepSeek and a second commercial LLM, to conduct simultaneous intrusions against more than 200 organisations in at least 14 countries from October 17, 2026.","tags":["agentic-ai","espionage","credential-theft","backdoor","china-linked"],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":"third_party","adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","severity_because":"major: The campaign reached more than 200 organisations across at least 14 countries, with confirmed post-exploitation at nine, meeting the many-third-parties rung.","harm_class":["third_party_security","operational"],"affected_description":"more than 200 organisations worldwide, including government institutions, pharmaceutical companies, semiconductor organisations, defence entities and telecommunications providers","protected_class_involved":null,"data_categories_exposed":["credentials"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://securitybrief.com.au/story/crowdstrike-uncovers-china-linked-ai-cyber-campaign","publisher":"SecurityBrief Australia","date":"2026-10-30","type":"press","title":"CrowdStrike uncovers China-linked AI cyber campaign","archived_url":null,"attachment":"first_report","independence":"independent"},{"url":"https://www.nbcnews.com/tech/security/china-linked-hackers-used-ai-target-200-organizations-crowdstrike-says-rcna606343","publisher":"NBC News","date":"2026-10-29","type":"press","title":"Chinese hackers used DeepSeek and other AI tools in sweeping global cyberattacks, report finds","archived_url":null,"attachment":"fingerprint","independence":"independent"}],"per_field_confidence":{"system.model_name":"C","system.harness":"C","system.tools_granted":"C","system.integration_type":"C","system.intended_use":"C","system.developer":"D","system.autonomy_level":"C","system.deployment_context":"D","event.date_occurred":"C","event.tags":"C","event.responsible_party":"C","event.adversarial_actor":"C","event.agent_involved":"C","event.trigger":"C","event.detection_method":"C","event.summary":"C","event.incident_class":"C","event.date_disclosed":"A","impact.harm_class":"C","impact.affected_description":"C","impact.data_categories_exposed":"C","impact.severity":"D","context.industry":"D","context.denominator_available":"D","context.country":"D","impact.severity_because":"D"},"field_citations":{"system.model_name":[{"source_index":0,"quote":"VAPOR PANDA primarily operated ARTEX using DeepSeek, supplemented by a second subscription-based commercial LLM that CrowdStrike Intelligence could not identify."}],"system.developer":[{"source_index":0,"quote":"VAPOR PANDA primarily operated ARTEX using DeepSeek, supplemented by a second subscription-based commercial LLM that CrowdStrike Intelligence could not identify."}],"system.harness":[{"source_index":0,"quote":"ARTEX coordinates a main agent with subordinate planning and worker agents."}],"system.tools_granted":[{"source_index":0,"quote":"The operator directed agents to develop web shells, extract domain administrator passwords and identify endpoint security coverage across targeted environments."},{"source_index":0,"quote":"These agents operate through a shared graph of information, findings and objectives, allowing them to progress through different stages of an intrusion, from initial access to host reconnaissance and lateral movement."}],"system.autonomy_level":[{"source_index":0,"quote":"Recovered transcripts showed a human operator issuing instructions in Chinese and intervening at key decision points."}],"system.integration_type":[{"source_index":0,"quote":"ARTEX coordinates a main agent with subordinate planning and worker agents."}],"system.intended_use":[{"source_index":0,"quote":"CrowdStrike has uncovered a cyber espionage campaign by China-linked threat actor VAPOR PANDA, which used an agentic artificial intelligence framework to conduct simultaneous intrusions against more than 200 organisations worldwide."}],"event.date_occurred":[{"source_index":0,"quote":"The campaign began on October 17, 2026, and involved ARTEX, an open-source agentic AI framework, alongside the Chinese-developed DeepSeek large language model (LLM) and a second commercial LLM."}],"event.trigger":[{"source_index":0,"quote":"The operator directed agents to develop web shells, extract domain administrator passwords and identify endpoint security coverage across targeted environments."}],"event.detection_method":[{"source_index":0,"quote":"CrowdStrike's OverWatch team observed exploitation activity from a single ARTEX controller directed against organisations in at least 14 countries over an 11-day period."}],"event.summary":[{"source_index":0,"quote":"CrowdStrike has uncovered a cyber espionage campaign by China-linked threat actor VAPOR PANDA, which used an agentic artificial intelligence framework to conduct simultaneous intrusions against more than 200 organisations worldwide."}],"event.tags":[{"source_index":0,"quote":"The cybersecurity company confirmed post-exploitation activity at nine organisations, where the attackers gained access, deployed the BLOODALCHEMY backdoor and conducted further credential spraying, network scanning and reconnaissance."}],"event.responsible_party":[{"source_index":0,"quote":"CrowdStrike has uncovered a cyber espionage campaign by China-linked threat actor VAPOR PANDA, which used an agentic artificial intelligence framework to conduct simultaneous intrusions against more than 200 organisations worldwide."}],"event.adversarial_actor":[{"source_index":0,"quote":"CrowdStrike has uncovered a cyber espionage campaign by China-linked threat actor VAPOR PANDA, which used an agentic artificial intelligence framework to conduct simultaneous intrusions against more than 200 organisations worldwide."}],"event.incident_class":[{"source_index":0,"quote":"The cybersecurity company confirmed post-exploitation activity at nine organisations, where the attackers gained access, deployed the BLOODALCHEMY backdoor and conducted further credential spraying, network scanning and reconnaissance."}],"event.agent_involved":[{"source_index":0,"quote":"ARTEX coordinates a main agent with subordinate planning and worker agents."}],"impact.harm_class":[{"source_index":0,"quote":"The cybersecurity company confirmed post-exploitation activity at nine organisations, where the attackers gained access, deployed the BLOODALCHEMY backdoor and conducted further credential spraying, network scanning and reconnaissance."}],"impact.affected_description":[{"source_index":0,"quote":"The operation targeted government institutions, pharmaceutical companies, semiconductor organisations, defence entities and telecommunications providers."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"The operator directed agents to develop web shells, extract domain administrator passwords and identify endpoint security coverage across targeted environments."}],"impact.severity_because":[{"source_index":0,"quote":"CrowdStrike has uncovered a cyber espionage campaign by China-linked threat actor VAPOR PANDA, which used an agentic artificial intelligence framework to conduct simultaneous intrusions against more than 200 organisations worldwide."}],"context.industry":[{"source_index":0,"quote":"The operation targeted government institutions, pharmaceutical companies, semiconductor organisations, defence entities and telecommunications providers."}],"impact.severity":[{"source_index":0,"quote":"CrowdStrike has uncovered a cyber espionage campaign by China-linked threat actor VAPOR PANDA, which used an agentic artificial intelligence framework to conduct simultaneous intrusions against more than 200 organisations worldwide."}],"event.date_disclosed":[{"source_index":0,"quote":"published: 2026-10-30"}]},"notes_on_gaps":"Only one source (SecurityBrief Australia, press) is present. No primary disclosure from the implicated parties (DeepSeek, ARTEX maintainers) or from a government evaluator; detection rests on CrowdStrike's OverWatch as reported by press. event.failure_class left null: the agent mechanism is not stated by any source (the agents acted on a human operator's instructions against victims, which fits no failure_class test cleanly; harmful_compliance concerns harm to the principal, not third parties). event.root_cause left null: no source names what failed. event.date_disclosed not written (derived). system.model_version, permissions_scope, guardrails_present, safeguard_state, production_intended, deployment_context, lifecycle_stage not stated. event.input_provenance, operations_paused, remediation, precursor_events, near_miss, control_failure not stated. impact.direct_loss_usd, records_exposed, reversibility, loss_range_usd not stated. context.country, org_size_band, denominator, systemic_exposure, shared_model_id, incident_evidence, regulatory, coverage not stated. system.developer unknown because the second commercial LLM is unidentified and DeepSeek's role as developer of the model is not stated. context.industry classified from targeted sectors (grade D). event.trigger human_misuse rests on the operator deliberately directing the agents. event.detection_method third_party rests on CrowdStrike OverWatch observing the activity. event.duration P11D stated but not written in fields per rules; no dated timeline items given to bound it. impact.third_parties_affected_count: the source gives 200 only as a bound ('more than'); not stored as an exact count. system.tier: not set; no operator named and deployment_context is not a lab's. [aggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-30] system.developer: no source names the developer. system.deployment_context: no source states where it ran. context.industry: classified from described behaviour. context.denominator_available: no denominator is available for this incident. context.country: no source states the operator's location. [2026-10-30: source attached: https://www.nbcnews.com/tech/security/china-linked-hackers-used-ai-target-200-organizations-crowdstrike-says-rcna606343 (fingerprint); Both describe the same China-linked VAPOR PANDA/ARTEX campaign using DeepSeek against over 200 organizations worldwide.] [2026-10-30: evidence level: Preliminary → Confirmed (2 independent outlets)] [2026-10-30: re-scored after its sources changed: 62.6]"},"context":{"industry":"Public Administration","org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"VAPOR PANDA ran ARTEX, an open-source agentic framework using DeepSeek and a second commercial LLM, with a main agent plus planning and worker agents. A human operator issued instructions in Chinese, directing agents to build web shells, extract domain administrator passwords and map endpoint security across targeted networks.","quote":"The operator directed agents to develop web shells, extract domain administrator passwords and identify endpoint security coverage across targeted environments.","source_index":0,"grade":"C"},{"step":"went_wrong","text":"The agents carried out intrusions against more than 200 organisations, gaining access, deploying the BLOODALCHEMY backdoor and conducting credential spraying, network scanning and reconnaissance, breaching the security boundaries of victim networks.","quote":"The cybersecurity company confirmed post-exploitation activity at nine organisations, where the attackers gained access, deployed the BLOODALCHEMY backdoor and conducted further credential spraying, network scanning and reconnaissance.","source_index":0,"grade":"C"},{"step":"reached","text":"Activity hit organisations in at least 14 countries, including foreign ministries, an interior ministry, defence and intelligence entities, 19 US organisations and telecom providers in the US, Belgium and the Philippines. Post-exploitation was confirmed at nine organisations.","quote":"CrowdStrike's OverWatch team observed exploitation activity from a single ARTEX controller directed against organisations in at least 14 countries over an 11-day period.","source_index":0,"grade":"C"},{"step":"caught","text":"CrowdStrike's OverWatch team observed the exploitation activity from a single ARTEX controller directed against organisations in at least 14 countries over an 11-day period.","quote":"CrowdStrike's OverWatch team observed exploitation activity from a single ARTEX controller directed against organisations in at least 14 countries over an 11-day period.","source_index":0,"grade":"C"},{"step":"done","text":"CrowdStrike published the findings and recommended rotating signing keys, preauthentication keys and service credentials, enforcing SAML signature validation, requiring IMDSv2, restricting cloud role command-execution permissions, patching internet-facing systems and deploying EDR agents.","quote":"CrowdStrike recommended that organisations rotate signing keys, preauthentication keys and service credentials following suspected data exposure, including credentials contained in historical backups and directory exports.","source_index":0,"grade":"C"}],"model":"deepseek-chat","prompt_version":"aggregate-2026-09-27.1","extracted_at":"2026-10-30","source_urls":["https://securitybrief.com.au/story/crowdstrike-uncovers-china-linked-ai-cyber-campaign"]}}