AI-Driven tool ARTEX used in attacks against South Korean Banks
ID: 5f708988-a320-5b63-8f17-b1fdb31eeb8e
STIX ID: report--5f708988-a320-5b63-8f17-b1fdb31eeb8e
Feed Name: Security Affairs
Threat Score
CrowdStrike analyzed open directories left by an attacker who used the ARTEX AI agent and multiple large language models to compromise several South Korean financial organizations in late September–early October 2026, exposing session histories, configuration and memory files that reveal operational tradecraft, proxy IPs, model usage and evidence of data exfiltration being prepared for sale.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.