Attacker used ARTEX AI to breach South Korean financial firms

CrowdStrike examined exposed directories and working notes left by the attacker, according to Security Affairs, which reports that the campaign ended with stolen data. BleepingComputer identifies the attacker as a Chinese hacker and reports that Claude agents were used alongside the ARTEX AI penetration testing suite.

• The campaign ran from late September to early October 2026, according to Security Affairs.

Covered by 2 publishers within 30 hours of the first report.

• BleepingComputer: ARTEX AI, Claude agents used in cyberattacks on South Korean banks

Reporting2

SAF Security Affairs AI-Driven tool ARTEX used in attacks against South Korean Banks · Pierluigi Paganini 3:53 AM

BC BleepingComputer ARTEX AI, Claude agents used in cyberattacks on South Korean banks · Bill Toulas 10:16 AM

Related

G OpenAI and other AI firms face questions at Australian inquiry October 5

CSN Researchers link ARTEX AI tool to data theft at South Korean financial firms October 6

BC South Korea orders bank breach inquiry as president flags possible AI use October 4

BC Nikkei says attackers breached employee email accounts October 5

Topics AnthropicData breaches