ARTEX Traces Found in 91APP Intrusion in Taiwan
91APP’s investigation found traces of the ARTEX automated attack tool during an intrusion into its internal network and Commerce Cloud order database, according to iThome Taiwan. The attackers reportedly entered through an outdated Appsmith installation, retrieved database keys from GitLab, and accessed one order database; 91APP says credit-card information was not involved and is still determining the full scope.
The reported discovery extends the use of the open-source AI penetration-testing framework ARTEX to a Taiwan incident, although the connection relies on 91APP’s investigation as reported by one outlet and has not been independently confirmed.
From the digest “【資安日報】10月27日，91APP遭駭事件查出ARTEX攻擊痕跡，顯示不只日韓，臺灣也出現相…”
91APP遭駭事件查出ARTEX攻擊痕跡，顯示不只日韓，臺灣也出現相關攻擊案例
91APP公布遭駭事件調查結果，指出攻擊者利用未及時更新的第三方工具Appsmith入侵內部網路，再從GitLab取得資料庫金鑰，非法存取Commerce Cloud其中一座訂單資料庫，並在系統中發現ARTEX自動化攻擊工具的痕跡。91APP已於10月14日阻斷入侵，並移除Appsmith、更換內部系統權杖及資料庫帳密、重建GitLab權限，停用遭冒用帳號，並限制CI主機與資料庫網段連線。91APP表示此次事件不涉及信用卡資訊，其他主要服務未受影響，承諾補償受害消費者財損，並持續調查實際受影響範圍。詳全文