CrowdStrike tells CyberScoop that VAPOR PANDA's AI-driven campaign compromised about 140 sensitive targets in 11 days
The victims include foreign ministries, a European presidency and prime minister's office, and 19 US organizations in sensitive industries.
Evidence: Independent reports. Security stories run only with a named disclosure or independent reporting behind them.
New reporting on CrowdStrike's analysis of the China state-backed group it tracks as VAPOR PANDA describes a much larger toll than earlier reports. CyberScoop, citing CrowdStrike, says the group used the agentic AI penetration testing framework ARTEX to compromise about 140 sensitive targets in 11 days. Earlier coverage reported confirmed post-exploitation at nine organizations. CrowdStrike says the campaign has targeted more than 200 organizations in at least 14 countries since October 17. According to CyberScoop, the targets and confirmed victims include foreign ministries, a European country's presidency and prime minister's office, and defense and intelligence agencies. They also include 19 US organizations in the pharmaceutical, semiconductor, defense, nuclear and financial sectors, plus telecom providers in the United States, Belgium and the Philippines. CyberScoop describes the campaign as ongoing and fast-moving. The Hacker News also covered the campaign and the 200-plus organizations targeted. The new figure matters because it suggests an automated offensive framework turned a large share of its attempts into intrusions against government and critical-sector networks within days. Defenders have less time to detect and contain them.