[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Threat Hunting · markdown

vendor research (Hunt.io, Nov 4); expands CrowdStrike/Genians ARTEX reporting on South Korean bank breaches; CERT notified before publish

Hunt: Hunt.io maps ARTEX jump-host open directories with Claude Code shims, 19 agent skills and JNDI tooling tied to the South Korea bank campaign

  • Core IOCs: 38.244.50[.]120 (ARTEX console / SSH tunnel dest; title "ARTEX - 自主渗透测试控制台"; ports 443/8090); 23.248.226[.]250 (HK jump; :18099 open dir, :8001 JNDI/LDAP); 154.201.79[.]246 (proxy enum); domains xcai[.]pro, direct[.]xcai[.]pro, fofoapi[.]com, u6ud2s[.]dnslog[.]cn.
  • Cert pivot: TLS fingerprint associated with issuer org ARTEX on the console host (see Hunt.io IOC table).
  • Host signals: unexpected Claude Code Router on :3456, Gemini2API admin UIs, Tinyproxy, open dirs with reverse-SSH / skill JSON.
  • Defend: pull admin panels off the internet (VPN/allowlist); rotate SSH, API, proxy and model-gateway secrets; watch LDAP/JNDI, odd DNS callbacks and model-gateway traffic to unexpected destinations.

Sources: Hunt.io: ARTEX Exposed — Mapping the Infrastructure Behind the South Korean Bank Breaches (Nov 4) · SecurityAffairs summary of Hunt.io findings (Nov 7)