A Chinese-speaking attacker targeted South Korean financial institutions earlier this month using AI-powered tools to breach major banks including Shinhan, KB Kookmin, and Hana Bank. The cyberattacks resulted in exposure of customer personal data and credit card information, with some banks experiencing system disruptions. South Korean authorities convened an emergency meeting to address the breaches and implement security improvements for critical infrastructure.
Security researchers at CrowdStrike identified that the attacker used the ARTEX AI penetration testing tool combined with Claude agents to conduct the attacks. Analysis of exposed files revealed the threat actor’s activity logs and personal information, including what appeared to be a resume. Based on available evidence, investigators suggested the attacker may be a 26-year-old individual from China, though researchers cautioned that personal details found could not definitively confirm identity. Following confirmation of real-world ARTEX usage in attacks, the tool’s original developer converted the project to closed-source, though derivatives remain available online.
Source: Read the full story at BleepingComputer
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
