Storm-3358: ARTEX Exploits SSRF & File Upload

At-A-Glance Incident Diagnostic Telemetry

---

Executive Incident Briefing (2-Minute CISO Brief)

1. Strategic Incident Overview

Storm-3358, a financially motivated threat actor tracked by Microsoft Threat Intelligence, has been exploiting server-side request forgery (SSRF) and anonymous file upload vulnerabilities using the ARTEX agentic AI offensive framework. This activity has been observed targeting financial organizations in Southeast Asia and globally. Storm-3358 has used ARTEX in combination with conventional automated tools to scan systems, exploit security flaws, and install open-source remote access trojans (RATs). Microsoft has provided indicators of compromise (IOCs) to help defenders detect related activity.

To mitigate this threat, defenders can use defensive honeypots, decoys, tarpits, and fake wins to pull autonomous AI attacks away from legitimate targets. Additionally, Microsoft's Security Copilot and Defender XDR products offer AI-powered capabilities to summarize incidents, analyze files and scripts, and generate device summaries, hunting queries, and incident reports.

Microsoft Defender customers can refer to the list of applicable detections below, and Microsoft Defender XDR customers can use the following threat analytics reports in the Defender portal to get the most up-to-date information about the activity and techniques discussed in this blog.

This incident highlights the ongoing trend of threat actors accelerating all stages of the attack chain with agentic AI penetration testing frameworks, including ARTEX. As these capabilities evolve, defenders must similarly use AI to investigate and respond across large environments.

2. Business Impact & Perimeter Exposure

The business impact of Storm-3358's use of ARTEX and other agentic AI frameworks is significant. The threat actor's ability to accelerate all stages of the attack chain enables them to move laterally, escalate privileges, and exfiltrate data at machine speed. This can result in significant financial losses, as well as reputational damage and downtime.

The use of agentic AI frameworks like ARTEX also allows Storm-3358 to leverage compromised credentials and systems at machine speed. This enables the threat actor to perform brute-force password attacks, password spraying, API enumeration and abuse, and database dumping.

Defenders can use AI-powered security tools and techniques, such as machine learning-based detection and response, to stay ahead of the evolving threat landscape. This requires the use of AI to investigate and respond across large environments, and the use of defensive honeypots, decoys, tarpits, and fake wins to pull autonomous AI attacks away from legitimate targets.

3. Compliance & Governance Blast Radius

The compliance impact of Storm-3358's use of ARTEX and other agentic AI frameworks is significant. The threat actor's ability to accelerate all stages of the attack chain enables them to move laterally, escalate privileges, and exfiltrate data at machine speed. This can result in significant non-compliance with regulatory requirements, such as GDPR Art. 33 and NIS2.

The use of agentic AI frameworks like ARTEX also allows Storm-3358 to leverage compromised credentials and systems at machine speed. This enables the threat actor to perform brute-force password attacks, password spraying, API enumeration and abuse, and database dumping.

Defenders can use AI-powered security tools and techniques, such as machine learning-based detection and response, to stay ahead of the evolving threat landscape. This requires the use of AI to investigate and respond across large environments, and the use of defensive honeypots, decoys, tarpits, and fake wins to pull autonomous AI attacks away from legitimate targets.

---

Technical Vulnerability Analysis & Attack Chain

Root-Cause & Exploitation Mechanics

The ARTEX agentic AI offensive framework has been used by Storm-3358 to exploit SSRF and anonymous file upload vulnerabilities in web applications. This has allowed the threat actor to install open-source remote access trojans (RATs) on compromised systems. The RATs used by Storm-3358 include WISP, vshell, and AdaptixC2, which are used for persistence and lateral movement.

Microsoft has observed ARTEX agents using utilities like netcat and curl to download these RATs to compromised systems. The agents can also perform brute-force password attacks, password spraying, API enumeration and abuse, and database dumping. Agentic tools like ARTEX can leverage compromised credentials and systems at machine speed to move laterally, escalate privileges, and exfiltrate data.

The use of ARTEX and other agentic AI frameworks by Storm-3358 and other threat actors highlights the need for defenders to use AI to investigate and respond across large environments. This requires the use of AI-powered security tools and techniques, such as machine learning-based detection and response, to stay ahead of the evolving threat landscape.

Microsoft's research into threats involving agentic frameworks informs security detections and investigative context across its products. The capabilities available to customers depend on the source of the activity and the products and protections deployed in their environment.

Adversary Ingress & Lateral Traversal Pipeline

Storm-3358's use of ARTEX and other agentic AI frameworks allows the threat actor to accelerate all stages of the attack chain. This includes scanning systems, exploiting security flaws, and installing RATs on compromised systems. The agents can then use these RATs to move laterally, escalate privileges, and exfiltrate data.

The use of agentic AI frameworks like ARTEX also allows Storm-3358 to leverage compromised credentials and systems at machine speed. This enables the threat actor to perform brute-force password attacks, password spraying, API enumeration and abuse, and database dumping.

Defenders can use defensive honeypots, decoys, tarpits, and fake wins to pull autonomous AI attacks away from legitimate targets. This can help to reduce the attack traffic reaching real assets and produce high-confidence, attribution-quality signal.

---

MITRE ATT&CK Tactics, Techniques & Procedures (TTPs)

---

Threat Actor Profile & Exploitation Telemetry

Storm-3358 is a financially motivated threat actor tracked by Microsoft Threat Intelligence. The threat actor is based in Cambodia and primarily targets financial organizations in Southeast Asia, as well as a smaller number of large financial organizations globally. Storm-3358 has been observed using ARTEX and other agentic AI frameworks to exploit SSRF and anonymous file upload vulnerabilities in web applications.

The threat actor's motivation is financial gain, and they use agentic AI frameworks to accelerate all stages of the attack chain. This includes scanning systems, exploiting security flaws, and installing RATs on compromised systems. Storm-3358's use of ARTEX and other agentic AI frameworks highlights the need for defenders to use AI to investigate and respond across large environments.

---

Detection & SOC Mitigation Playbook

1. Patch Deployment & Workaround Engineering

Review official vendor security bulletins and deploy released security hotfixes across all production and staging environments immediately.

2. Network & Perimeter Defenses

• Restrict administrative ingress to dedicated, non-routable management subnets requiring hardware MFA.
• Enforce strict egress inspection to drop outbound connection attempts to unauthorized public IP space.

3. Verification & Diagnostic Audit Checklist

Remediation & Verification Checklist

• Review and update web application security configurations to prevent SSRF and anonymous file upload vulnerabilities
• Implement defensive honeypots, decoys, tarpits, and fake wins to pull autonomous AI attacks away from legitimate targets
• Use AI-powered security tools and techniques, such as machine learning-based detection and response, to stay ahead of the evolving threat landscape
• Regularly review and update security detections and investigative context across Microsoft products
• Use Microsoft Security Copilot and Defender XDR products to gain insights into AI security posture and stay ahead of AI-enabled threat activity

---

Indicators of Compromise (IOCs)

No specific binary hashes were published in the authoritative advisory; hunt using behavioral telemetry and detection rules above.

---

Frequently Asked Questions (FAQ)

1. Is Storm-3358 actively exploited in the wild?

While no mass exploitation has been publicly observed to date, the severity of the flaw warrants urgent patch deployment ahead of weaponization.

2. Which systems, applications, and perimeters are affected?

The vulnerability primarily impacts Storm-3358 installations exposed to public-facing internet traffic or unauthenticated internal network segments.

3. What immediate remediation or patch should organizations deploy today?

Deploy the official security hotfixes released by the vendor immediately. If patching cannot be completed today, implement network ingress restrictions and isolate management interfaces.

4. How can security operations teams detect and hunt for this threat?

Defenders should monitor process creation logs for abnormal shell executions under web servers (e.g. bash, powershell under nginx/httpd) using the provided Sigma rule and Microsoft Sentinel KQL query.