misuseIn brief · · · Written with AI
An attacker used AI agents against South Korean banks, CrowdStrike says
CrowdStrike attributes, with moderate confidence, the attacks on South Korean financial firms to an actor who used an AI-agent tool. Who the attacker is, and how far the damage goes, is not confirmed.
On 7 October the cybersecurity firm CrowdStrike published a report on attacks against South Korean financial firms since late September. It attributes them, with moderate confidence, to an unidentified actor who is probably a Chinese speaker and financially motivated. The actor used ARTEX, an open-source tool that automates penetration testing with AI agents, running mostly on DeepSeek v4.1-flash. Claude Code session histories were left exposed on the attacker's servers.
According to Reuters, at least nine banks have disclosed or been reported as targets, and Shinhan Bank said data on about 25,000 customers was compromised. CrowdStrike cautions that the personal details found in one session cannot be tied to the attacker with certainty, and that the number of affected organisations remains unconfirmed.
Sources
Written by AI from these sources.
- Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean FinanceAccessed 18 October 2026
- South Korean banks were likely hacked by a China-based actor with an AI agent, CrowdStrike saysAccessed 18 October 2026