Follow us on Google News
The US Federal Bureau of Investigation (FBI) has issued a security alert warning that an open-source artificial intelligence tool called Artex is being used by cybercriminals and state-backed attackers to automate cyberattacks against government agencies and critical infrastructure worldwide.
The tool can perform multiple stages of hacking with limited human involvement, allowing attackers to compromise computer systems at unprecedented speed.
The FBI said some attacks using the framework had progressed from initial targeting to privileged access in less than three hours.
What Is Artex and How Does It Work?
Artex is an open-source, AI-powered penetration-testing platform designed to perform cybersecurity tasks automatically. It allows users to provide instructions in ordinary language, which the system converts into technical commands for identifying and exploiting security weaknesses.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
Unlike conventional hacking tools that require operators to manually perform each step, Artex can coordinate several activities, including network reconnaissance, vulnerability identification, exploitation and data extraction.
The framework can work with different artificial intelligence models, including Anthropic’s Claude, OpenAI’s GPT, DeepSeek, GLM, Grok and Kimi.
According to the FBI, attackers can use these capabilities to conduct complex cyber operations simultaneously, significantly reducing the technical knowledge and time required to execute intrusions.
Investigators found that Chinese AI models were particularly common among attacker-controlled installations, with DeepSeek Flash frequently used because of its capabilities and relatively low operating costs. The framework was originally released on GitHub in August 2026 by an account named Autumn-27.
Its developer, identified as Chinese cybersecurity engineer Li Puhua, acknowledged in October that malicious actors had misused the software. He denied responsibility for criminal activities and subsequently removed the original repository.
However, the FBI warned that modified versions, archived copies and commercial editions remain available.
How Are Hackers Using Artex to Target Organisations?
The FBI said the framework has been used in attacks involving financial services, government institutions, healthcare, energy, telecommunications, manufacturing and defence-related organisations.
Recent cybersecurity findings identified more than 1,600 publicly exposed Artex console instances, suggesting that the platform has spread widely.
Attackers have reportedly used the framework to identify vulnerable systems, compromise credentials, move between connected networks and extract sensitive information.
Microsoft linked Artex to a supply-chain attack targeting the IT management software company ConnectWise, allegedly involving Chinese state-backed actors. Separate investigations also identified its use in attacks targeting financial institutions in South Korea and Japan.
Amazon’s security researchers reported that several suspected Chinese-linked threat groups had used Artex in coordinated campaigns designed to obtain access to AI services and steal credentials.
The FBI warned that the platform enables attackers with limited technical expertise to conduct complex operations across multiple targets.
Why Does Artex Raise Serious Cybersecurity Concerns?
A major concern is the framework’s ability to automate time-consuming hacking activities that previously required continuous human supervision.
Researchers found that AI agents using Artex could identify weak security controls, investigate relationships between organisations and target less-protected third-party systems.
These potential entry points include supplier portals, employee applications, mobile services, outdated software and connected business platforms.
The technology also enables attackers to conduct multiple operations simultaneously, potentially overwhelming security teams with unusually large volumes of suspicious activity. Investigators warned that automated attacks could progress faster than organisations can identify and respond to them.
The FBI’s warning highlights how artificial intelligence is changing cybercrime by allowing attackers to combine automated vulnerability discovery, system exploitation and data theft within a single framework.
The findings underline the importance of securing exposed systems, monitoring unusual network activity and strengthening controls over third-party access as AI-assisted cyberattacks become increasingly sophisticated.
About the author — Ayesha Aayat writes on cybercrime, digital safety, and emerging online threats. Her work focuses on public awareness, legal clarity, and technology-driven risks.
Click Here For The Original Source.
——————————————————–
