Tool
ScopeWeaver
- First Reported
- Oct 30, 2026
- Latest Reported
- Nov 2, 2026
Reported Context (2)
- Although ARTEX was taken down by its author after reports of widespread misuse emerged, it has spawned multiple versions, including a commercial offering dubbed ARTEX PRO and a localized variation called ScopeWeaver. CL-UNK-1211 Targets Government Linux Servers With SysGoRAT and Suspected AI-Generated Scripts
- continues to proliferate globally via community forks, including localized variations such as ScopeWeaver and a commercial version dubbed ARTEX PRO. Mandiant Observes Threat Actors Using ARTEX and Other Agentic Attack Frameworks
Malware (3)
People (2)
Threat Actors (3)
MITRE ATT&CK (17)
Vendors (5)
Products (8)
Tools (11)
Industries (10)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.