ARXON: First Weaponized MCP Server Documented

Deep-dive analysis reveals ARXON, a custom Python MCP server used in the FortiGate 600+ device campaign. ARXON ingests reconnaissance data, queries DeepSeek for structured attack plans, and uses Claude Code to autonomously execute Impacket, Metasploit, and hashcat with hardcoded credentials. A Go-based orchestrator (CHECKER2) processed 2,516 targets in parallel across 106 countries. This is the first publicly documented case of MCP being used as offensive attack infrastructure, evolved from the open-source HexStrike framework. HexStrike v6.0 was separately exploited to weaponize Citrix CVE-2025-7775 in under 10 minutes.

The MCP protocol that powers your legitimate agent tooling is equally effective for autonomous attack campaigns. The 37% of network-exposed MCP servers with zero authentication makes this an active, exploitable attack surface.