FBI warns ARTEX lets attackers automate intrusions at machine speed

The FBI has issued a flash alert on ARTEX, an open-source framework that uses AI agents to automate cyber intrusions "at machine speed, from reconnaissance through data exfiltration." Since at least August 2026, attackers have used it against organisations in financial services, government, technology, defence, semiconductors, energy, healthcare, manufacturing, telecommunications and legal services, the FBI said.

ARTEX turns goals written in plain language into commands carried out by AI agents. It has no model of its own and connects to outside models, including Anthropic's Claude, OpenAI's GPT, DeepSeek, GLM, Grok and Kimi. The FBI said analysis of attacker-controlled instances shows Chinese models are most common, with DeepSeek Flash models dominating because of their capabilities, low cost and "lack of observable guardrails when framed for penetration testing."

Some intrusions went from first targeting to privileged access in under three hours, according to the alert. It cites attacks on South Korean financial institutions that exposed personal information of about 67,000 people, and a supply chain compromise of ConnectWise Cloud Backup customers that gave access to more than 2,250 downstream tenants. The original developer removed the GitHub repository in October, but forks, archived copies and a commercial version called ARTEX PRO remain available, and researchers found more than 1,600 publicly exposed ARTEX consoles in early November.

The same day, Amazon published research on Chinese-linked groups using ARTEX to steal credentials for AI models, with stolen keys paying for the inference behind further credential theft, The Record reports. Earlier, Censys and Check Point reported on the tool's spread.