FBI warns ARTEX AI pentesting framework is being weaponized for attacks

The FBI says criminal groups are using the open source ARTEX framework to run autonomous, LLM driven cyberattacks, with some intrusions reaching privileged access in under three hours.

The Federal Bureau of Investigation, through its Internet Crime Complaint Center, warned on November 13, 2026 that criminal groups are weaponizing ARTEX, an open source, Go language, LLM driven multi agent penetration testing framework, to run autonomous cyberattacks at machine speed. According to the FLASH-20261113-001 advisory, some intrusions moved from initial targeting to privileged access in under three hours.

What the advisory lays out

FBI FLASH advisory FLASH-20261113-001 was issued on November 13, 2026.
ARTEX converts natural language objectives into attack commands that specialized agents execute with little human input.
The FBI says abuse has been observed in the wild since at least August 2026, with some intrusions reaching privileged access in under three hours.
Researchers identified more than 1,600 publicly exposed ARTEX consoles as of early November 2026.
ARTEX connects to multiple LLM backends, including Claude, GPT, DeepSeek, GLM, Grok and Kimi models, with Chinese models, especially DeepSeek Flash, predominating among attacker controlled deployments due to lower cost and fewer observable guardrails.
The original developer, using the alias Autumn-27, published ARTEX on GitHub around July to August 2026; the repository was taken down on October 8, 2026 after abuse reports, but forks and an ARTEX PRO variant remain available.

What it means for people who build with AI

This is the first major US federal advisory to name a specific weaponized, LLM driven autonomous attack framework alongside concrete machine speed intrusion timelines. For teams building with multi agent frameworks, it is a direct signal that off the shelf autonomous tooling, the same kind used for legitimate automation, is already being abused at scale. The FBI lists energy, manufacturing, finance, government, technology, defense, healthcare, telecom and legal among the targeted sectors, underscoring how broadly these autonomous attacks are reaching.

Recommended next steps

The FBI recommends that organizations inventory their internet facing peripheral systems, restrict Kudu and SCM as well as cloud administration endpoints, and enforce least privilege rules on application consent grants to reduce exposure to ARTEX driven intrusions.

Sources

FLASH-20261113-001: ARTEX AI-Driven Autonomous Attack Framework (FBI / Internet Crime Complaint Center (IC3), November 13, 2026, official)
FBI Warns Hackers Are Weaponizing ARTEX AI Framework to Launch Autonomous Cyberattacks Worldwide (GBHackers, November 13, 2026)
FBI Warns Hackers Are Using ARTEX AI Agents to Breach Networks in Under 3 Hours (Cyber Press, November 13, 2026)

Written with AI assistance, strictly from the sources listed above. Before it went live, automated checks verified its dates, sources and every language edition.