FBI says open-source AI tool Artex automates cyberattacks in under 3 hours

The FBI released a flash alert Friday describing Artex as a framework that can connect any large language model to offensive cyber operations and automate multiple phases of an intrusion at machine speed. The advisory says the tool turns plain-language objectives into executable commands for AI agents, reducing the time needed to chain techniques. Some intrusions progressed from initial targeting to privileged access in under three hours, according to the FBI. The framework was first posted in August on GitHub by an account called Autumn-27.

The evidence trail includes Censys research cited by the FBI showing more than 1,600 publicly exposed Artex console instances, while total deployments are likely higher because many sit behind firewalls or private networks. The FBI said the framework continues to spread through community forks, localized variations, archived copies and a commercial version even after the developer removed the original GitHub repository. Developer Li Puhua said in October the tool was abused and denied responsibility. Amazon also published research Friday finding Chinese-nexus threat groups using Artex in a credential-theft operation that used stolen keys to pay for model inference.

The pattern is less about one tool than about AI agents given operational authority across an attack chain. Artex can integrate frontier models such as Anthropic Claude and OpenAI GPT, plus open-source and Chinese-origin models including DeepSeek, GLM, Grok and Kimi. The FBI said DeepSeek Flash models dominate observed attacker-controlled instances because they offer capability, low cost and weak observable guardrails when framed as penetration testing. Microsoft linked Artex to a Chinese state-backed actor in a ConnectWise supply-chain attack; the FBI did not attribute all Artex activity to one actor, and Microsoft's finding rests on vendor telemetry.

The real-world stakes sit in the compression of attack time and the expansion of who can run it. The FBI says Artex has been used against financial services, government, technology, defense, semiconductor, energy, healthcare, manufacturing, telecommunications and legal organizations, including recent attacks on South Korean and Japanese financial institutions. Amazon said Artex agents have mapped trust relationships between organizations and compromised weak third-party vendors, allowing smaller groups to run concurrent campaigns at a scale they previously could not.