FBI Warns AI Tool Can Accelerate Cyberattacks on Organisations Worldwide : Asian News Hub

Washington, Nov 14: Cybercriminals are using artificial intelligence-assisted tools to carry out attacks at an alarming speed, with some intrusions reportedly reaching privileged access within three hours, the FBI has warned.

In an alert issued on Friday (local time), the bureau identified an open-source framework called ARTEX as a tool being misused by malicious actors since at least August. The targeted organisations operate across several sectors, including finance, government, technology, defence, energy and healthcare.

According to the FBI, the framework can automate multiple stages of a cyberattack. These include identifying potential targets and preparing or executing data theft. Such automation can significantly reduce the time available for security teams to identify suspicious activity and respond.

Some Cyberattacks Reach Privileged Access in Under Three Hours

The FBI highlighted the speed at which attackers can now operate. In some cases, intrusions moved from the initial targeting stage to privileged system access in less than three hours.

The framework was initially developed for legitimate and authorised security testing. However, its misuse prompted the developer to remove the original online repository in October. The FBI cautioned that copies and modified versions of the tool continued to circulate.

The bureau warned that the framework could make sophisticated cyber operations accessible to a wider range of criminals. It may also allow attackers to pursue several organisations simultaneously.

Internet-facing applications, cloud infrastructure and systems linked to external suppliers or business partners were among the areas identified as potential points of exposure.

FBI Cites Attacks Affecting Thousands of People

The alert also highlighted incidents illustrating the possible consequences of such attacks.

In one case, financially motivated cybercriminals targeted financial institutions in South Korea, resulting in the theft of personal information belonging to approximately 67,000 people, according to the FBI.

The bureau also described a separate supply-chain breach involving users of a cloud backup service. The incident reportedly gave attackers access to more than 2,250 customer environments connected to the service.

Organisations Urged to Strengthen Cybersecurity

The FBI has advised organisations to examine their internet-facing systems and identify possible security weaknesses. It also recommended stronger identity and access controls, closer monitoring of unusual activity and better protection of login credentials.

Organisations that detect suspicious activity have been encouraged to contact the FBI or submit reports through its Internet Crime Complaint Center.

The warning highlights how tools originally created for legitimate security testing can be repurposed by criminals, making cyber threats faster and potentially more difficult for organisations to contain.

–IANS