ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Researchers disclosed an active, targeted campaign that used the open‑source agentic pentesting tool ARTEX and multiple LLM backends to breach South Korean financial organizations and exfiltrate data, with exposed session histories and configuration files tied to a Hong Kong‑hosted server (notably 38.244.50.120). Separately, a financially motivated actor operating the SCARLET LOOP platform automated credential stuffing and account takeover at scale using multiple LLMs and an anti‑detection browser, testing over 12 million credentials and validating ~11,832 across 3,968 domains, illustrating increasing malicious use of AI to accelerate intrusions and fraud.