CrowdStrike Links AI-Driven ARTEX Tooling to South Korean Bank Breaches

CrowdStrike said an unknown, likely Chinese-speaking threat actor used the AI-driven penetration-testing tool ARTEX and multiple large language models in a campaign against South Korean financial institutions, adding new detail to a breach wave involving Shinhan Bank, KB Kookmin Bank and Hana Bank. The cybersecurity firm also said exposed Claude Code session files contained possible personal details for a user identified as “YY,” but cautioned that the information cannot be definitively tied to the attacker.