TLDR Tech / News
AI Tool ARTEX Deployed by Unknown Group Against Korean Financial Sector
A previously unidentified threat actor, presumed to be Chinese-speaking and driven by financial motives, infiltrated South Korean financial institutions in late September and early October 2026. CrowdStrike Intelligence observed the use of the open-source penetration testing tool ARTEX, enhanced by large language models such as DeepSeek, GLM, and Grok, for data theft. The investigation uncovered Claude Code session data and configuration details indicating a dual-server setup and the employment of proxy IP addresses within the compromised infrastructure.
Read the full story