CrowdStrike Links South Korean Bank Breaches to Chinese AI Pentesting Tool ARTEX
ID: 95ebd8f3-dcd1-5b3c-8467-ed9759ee2080
STIX ID: report--95ebd8f3-dcd1-5b3c-8467-ed9759ee2080
Feed Name: securityonline.info
Threat Score
A suspected Chinese-speaking, financially motivated actor ran an AI-assisted intrusion campaign (late Sep–early Oct 2026) against multiple South Korean banks, compromising services and exposing roughly 68,000 records per press reports; CrowdStrike recovered Claude Code session histories, ARTEX configs, and AI memory files on open attacker servers and observed the actor seeking buyers for the stolen data, while Korean regulators opened probes and no arrests were reported.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.