Open-source AI platform Artex is automating cyberattacks at machine speed, according to a flash alert issued by the FBI on Friday, November 14, 2026.
“Artex significantly reduces the time required to chain attack techniques, with some intrusions progressing from initial targeting to privileged access in under three hours,” the FBI said.
The FBI advisory noted that Artex reduces the time required to chain attack techniques, allowing users with minimal technical expertise to run concurrent operations.
Released in August on GitHub by an account known as “Autumn-27”, the developer—identified as Chinese cybersecurity engineer Li Puhua—stated on October 8 that the tool was abused by malicious actors, denied responsibility, and removed the repository. Despite this removal, the framework continues to spread through community forks, localized variations, and a commercial version.
Censys research cited in the advisory shows over 1,600 publicly exposed Artex console instances, with total deployments likely higher behind firewalls and private networks. The penetration testing platform translates high-level tactical goals into actionable machine commands executed by AI agents. Artex integrates frontier models such as Anthropic Claude and OpenAI GPT alongside open-source or Chinese-origin models including DeepSeek, GLM, Grok, and Kimi.
“Analysis of attacker-controlled Artex instances shows Chinese models are most prevalent, with DeepSeek Flash family models dominating usage due to their balance of capabilities, relatively low cost, and lack of observable guardrails when framed for penetration testing,” the FBI explained. The tool has targeted financial services, government, technology, defense, semiconductor, energy, healthcare, manufacturing, telecommunications, and legal industries. Recent incidents include attacks on South Korean and Japanese financial institutions.
Microsoft reported that Artex was used by Chinese state-backed actors in a supply chain attack on IT management software company ConnectWise. Amazon released a study on Friday finding disparate Chinese-nexus threat groups using Artex for large-scale credential theft to access AI models, operating as a self-sustaining system where stolen keys fund further LLM inference. Another campaign targeted cryptocurrency exchanges for know-your-customer verification bypass using real-time deepfake injection.
“Frameworks like Artex have progressed from experimental use to sustained, multi-objective offensive operations that run with minimal human intervention,” said CJ Moses, Amazon Chief Information Security Officer, according to The Record.
Amazon’s investigation highlighted how smaller threat groups now run concurrent intrusion campaigns at an unprecedented scale. Artex agents map trust relationships between organizations and compromise third-party vendors by focusing on less-secured systems like partner portals, mobile backends, employee applications, sales-support systems, legacy services, and third-party integrations.
The framework generates high-volume attempts that trigger defense sensors while operating at speeds that challenge defenders trying to keep pace. The FBI advisory says that as Artex variants proliferate, threat actors will continue to have access to them to target global infrastructure.
