CrowdStrike says China-based suspect used AI tools in South Korean bank hacks
CrowdStrike said the attacker used ARTEX and Claude Code to target at least nine banks and steal customer data, with moderate confidence that money was the motive.
- U.S. cybersecurity firm CrowdStrike reported Wednesday that a 26-year-old suspect based in China's Guangdong province may be behind recent cyberattacks targeting South Korea's financial sector.
- Between late September and early October, financial institutions including Hana Bank, KB Kookmin Bank, and Shinhan Bank reported data breaches, prompting authorities to launch investigations into the coordinated attacks.
- CrowdStrike identified two servers used in the attacks and found a draft resume citing age 26 and education at South China University in Guangdong, created through Claude Code sessions using Chinese-developed tool ARTEX.
- On Tuesday, South Korean President Lee Jae Myung called for heightened cybersecurity measures as authorities launched formal probes into the data breaches affecting multiple financial institutions.
- CrowdStrike assessed with "moderate confidence" that the actor is financially motivated and linked the suspect to other cyber activity involving a Telegram-based NFT marketplace and Chinese payment platforms.
76 Articles
76 Articles
AI-assisted intrusion chain exposed in South Korean bank attacks
A Chinese-speaking threat actor used ARTEX AI and Claude agents in attacks against multiple South Korean banks, including Shinhan, KB Kookmin, and Hana. CrowdStrike traced open directories containing Claude session histories, ARTEX configs, and memory...
AI Likely Used By China-Based Hacker to Hit South Korean Banks, CrowdStrike Report Says
U.S. cybersecurity company CrowdStrike said a single person in China likely used artificial intelligence tools to attack South Korean financial organizations, resulting in data theft, according to a company report released Wednesday. CrowdStrike [1] said a single person in China likely used artificial intelligence tools to attack South Korean financial organizations, resulting in data theft. […]
AI Tools and Sloppy Opsec Expose Suspected Chinese Hacker Behind South Korean Bank Breaches
CrowdStrike uncovered exposed AI logs from a suspected Chinese hacker who used ARTEX and Claude to breach multiple South Korean banks. The logs contained a resume request with personal details plus queries about selling stolen data on Telegram. At least five lenders reported customer records compromised in the late September to early October campaign.
Crowdstrike claims that 26-year-old hacker in China used the tool to orchestrate serial invasions of South Korean banking systems
Coverage Details
Bias Distribution
- 43% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
