FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’

Open-source AI platform Artex is being used prolifically by cybercriminals and nation-states to breach government agencies and dozens of critical sectors worldwide, according to a new FBI advisory. 

The FBI released a flash alert on Friday about the tool, which has caused alarm among cybersecurity experts for its ability to take any large language model and turn it into a powerful hacking tool that can “automate multiple phases of cyber intrusions at machine speed, from reconnaissance through data exfiltration.”

“Artex significantly reduces the time required to chain attack techniques, with some intrusions progressing from initial targeting to privileged access in under three hours,” the FBI said. “The framework enables threat actors with minimal technical expertise to conduct complex, multi-target operations simultaneously, fundamentally accelerating attack velocity and expanding operational scale.”

The tool was released in August on GitHub by an account known as "Autumn-27.” The developer of the framework — identified as Chinese cybersecurity engineer Li Puhua — released a statement on GitHub on October 8 saying the tool was abused by malicious actors.

The developer denied any responsibility for crimes committed with it and eventually removed the GitHub repository. 

The FBI said on Friday that despite the removal, the framework “continues to proliferate through community forks, localized variations, archived copies, and a commercial version … ensuring continued availability to threat actors.”

The advisory cites recent research from cybersecurity firm Censys showing over 1,600 publicly exposed Artex console instances, with total deployments likely significantly higher when including systems behind firewalls or in private networks.

The penetration testing platform can translate high-level tactical goals described in words into actionable machine commands executed by AI agents, requiring minimal human interaction beyond the initial objectives. 

Artex can integrate any AI model, including frontier models Anthropic Claude and OpenAI GPT as well as open-source or Chinese-origin models like DeepSeek, GLM, Grok and Kimi. 

“Analysis of attacker-controlled Artex instances shows Chinese models are most prevalent, with DeepSeek Flash family models dominating usage due to their balance of capabilities, relatively low cost, and lack of observable guardrails when framed for penetration testing,” the FBI explained.

The tool has been used to conduct reconnaissance and data exfiltration attacks targeting financial services, government, technology, defense, semiconductor, energy, healthcare, manufacturing, telecommunications and legal industries.

It was recently implicated in multiple attacks on South Korean and Japanese financial institutions, causing national scandals in both countries. Microsoft said Artex was used by Chinese state-backed actors in a recent supply chain attack on IT management software company ConnectWise. 

Amazon joined the fray on Friday, releasing its own study finding “disparate Chinese-nexus threat groups” using Artex for “a large-scale theft of credentials to access AI models, organized as a self-sustaining operation in which stolen keys paid for the LLM inference powering further credential hunting.” 

“Another campaign targeted cryptocurrency exchanges for know-your-customer (KYC) verification bypass using real-time deepfake injection,” Amazon CISO CJ Moses said.

Moses argued their investigation showed that frameworks like Artex “have progressed from experimental use to sustained, multi-objective offensive operations that run with minimal human intervention.”

They warned that Artex is automating time-consuming phases of exploitation and is allowing smaller threat groups to run concurrent intrusion campaigns at a scale they previously could not.

Agents deployed by Artex have shown an ability to “map trust relationships between organizations” and compromise weak third-party vendors. 

Artex is adept at identifying and exploiting systems that have less security attention than others, including “partner and supplier portals, mobile backends, employee applications, sales-support systems, legacy services, third-party integrations, and applications created across different business units,” the FBI explained.

The tool generates a high-volume of attempts that will set off defense sensors but works at a speed that makes it difficult for defenders to keep up.