FBI Warns Hackers Have Weaponized the ARTEX AI Pen-Testing Framework

What happened

The alert, numbered FLASH-20261113-001 and titled “Threat Overview of ARTEX Autonomous Penetration Testing Framework,” was released through the Internet Crime Complaint Center and marked TLP:CLEAR, meaning it may be shared without restriction. The FBI pulls together reports from eleven industry and government sources, maps observed tactics to the MITRE ATT&CK framework, and lists prioritized mitigations and indicators of compromise.

The FBI says that since at least August 2026, a variety of malicious actors have used ARTEX against organizations globally in financial services, government, technology, defense, semiconductor, energy, healthcare, manufacturing, telecommunications and legal sectors. Citing Microsoft, the alert says some intrusions progressed from initial targeting to privileged access in under three hours; Google observed individual automated bursts lasting only two to 25 seconds.

Two campaigns are named: financially motivated attacks on South Korean financial institutions exfiltrated personal information on about 67,000 people, and a ConnectWise Cloud Backup supply-chain compromise gave attackers access to more than 2,250 downstream tenants. Microsoft previously linked ARTEX to Storm-0940, saying the group targeted Microsoft 365 environments through compromised ConnectWise application credentials; the FBI alert itself names no country.

What ARTEX is

ARTEX was released on GitHub in July 2026 by a developer using the name “Autumn-27.” Written in Go, the multi-agent platform turns high-level goals written in natural language into machine commands, with AI agents scanning targets, running tools, reviewing results and adjusting failed steps, with minimal human input after the objective is set. It carries no model of its own and connects to outside models including Claude, GPT, DeepSeek, GLM, Grok and Kimi.

The original repository was taken down in October 2026, but community forks, localized variants, archived copies and a commercial edition called ARTEX PRO keep it in circulation. Censys counted more than 1,600 publicly exposed ARTEX consoles as of early November. The FBI says ARTEX is best at finding systems that get less attention: supplier portals, sales tools, mobile backends and third-party integrations.

Key facts

1. Alert: FBI FLASH-20261113-001, released Nov 13, 2026, marked TLP:CLEAR, shareable without restriction
2. Framework: ARTEX, an open-source multi-agent pen-testing platform written in Go, released in July 2026 by developer “Autumn-27,” gaining 1,500 to 2,000 GitHub stars in 10 weeks
3. Speed: Some intrusions went from first targeting to privileged access in under three hours; Google observed individual automated bursts lasting two to 25 seconds
4. South Korea: Attacks on South Korean financial institutions exfiltrated personal information on about 67,000 people
5. ConnectWise: A cloud backup supply-chain compromise reached more than 2,250 downstream tenants; Microsoft linked ARTEX to Storm-0940
6. Exposure: More than 1,600 publicly exposed ARTEX consoles as of early November; the original repo was removed in October, forks and a commercial edition remain
7. Mitigations: The FBI recommends restricting exposed admin tools, reducing application permissions and scanning repositories for secrets