The FBI has issued FLASH-20261113-001, warning that hackers are weaponizing ARTEX, an autonomous penetration testing framework, to accelerate cyberattacks worldwide.
Published November 13, the advisory describes operations observed since August 2026, spanning reconnaissance, exploitation, privilege escalation, and data exfiltration.
Some intrusions progressed from initial targeting to privileged access in under three hours. Victims span financial services, government, defense, technology, healthcare, energy, and telecommunications, demonstrating how agentic automation lets operators coordinate complex intrusions across multiple targets with limited manual intervention.
FBI Warns Weaponizing ARTEX AI Framework
The FBI says this speed sharply compresses the window defenders have to investigate and contain suspicious activity. Written in Go, ARTEX converts natural-language objectives into machine commands executed by specialized agents.
Its multi-agent orchestration connects to external models, including Claude, GPT, DeepSeek, GLM, Grok, and Kimi, rather than shipping an embedded model.
The advisory says Chinese models predominate in attacker-controlled deployments, particularly DeepSeek Flash, citing cost, capability, and limited observable guardrails.
Developer “Autumn-27” released ARTEX in July and removed its GitHub repository on October 8 following abuse reports. Forks, archived copies, and ARTEX PRO preserve availability; researchers identified more than 1,600 publicly exposed consoles in early November.
Initial access combines exploitation of public-facing applications with abuse of trusted identities. Observed techniques include unsigned SAML assertions, XML external entity injection, server-side request forgery, server-side template injection, SQL injection, insecure direct object references, command injection, and anonymous uploads.
Agents also pivot through compromised vendor credentials and trusted business-to-business federation. After entry, they deploy JSP and PHP web shells, abuse Kudu administrative APIs, install WISP, vshell, or AdaptixC2, and add credentials to existing OAuth applications.
These activities establish persistence while expanding access through permissions already assigned to applications and cloud identities. Database access can become operating-system execution through MySQL log poisoning, allowing attackers to place web shells in accessible application directories.
Escalation also includes launching cloud instances with powerful IAM roles, querying cloud metadata through XXE, and performing DCSync to steal the domain krbtgt key. Agents enumerated more than 110,000 Active Directory objects, read LAPS passwords, and identified machines lacking CrowdStrike Falcon.
Lateral movement attempts used Pass-the-Ticket, WinRM, Kerberos relay, and Pass-the-Hash; endpoint protection blocked the observed Pass-the-Hash attempts.
Agents also performed Kerberoasting to harvest service tickets. Command-and-control infrastructure incorporated residential proxies, Tor, Chisel, and SoftEther, while staged output moved through rotating webhook.site endpoints.
Reported campaigns stole personal information concerning approximately 67,000 individuals in South Korea and compromised ConnectWise Cloud Backup, enabling access to more than 2,250 downstream tenants.
Indicators include ARTEX host 38.244.50[.]120, WISP nodes 199.19.95[.]66 through 199.19.95[.]68, and reseller domain xcai[.]pro.
The FBI recommends inventorying peripheral internet-facing systems, restricting Kudu/SCM and cloud administration endpoints, and enforcing least privilege for application consent grants.
Defenders should investigate unexpected LLM API traffic alongside other suspicious behavior, monitor Entra credential additions, and rate-limit sequential portal lookups.
Preserve Entra, Purview, and SIEM evidence without delaying urgent containment, and validate historical infrastructure indicators against current telemetry before blocking.
Join 16,000+ SOC teams using ANY.RUN to streamline threat investigations and reduce manual effort. Explore for your team
