Hacker Used Chinese-Developed A.I. Tool to Target South Korean Banks, CrowdStrike Says

Live updates

1. 1h ago

   CrowdStrike Links Chinese AI Tool to South Korean Bank Hacks

   A solo hacker operating from China breached major South Korean financial institutions using artificial intelligence tools, according to cybersecurity firm CrowdStrike. The attacker utilized a Chinese-developed, AI-powered penetration testing agent known as ARTEX alongside large language models like Anthropic's Claude to execute data theft campaigns and bypass cyber defenses. The incident has intensified international concern over how artificial intelligence lowers technical barriers for cybercriminals. In response to the breach, the Chinese developer of the ARTEX agent made the software closed-source, while Chinese foreign ministry officials stated they were unaware of the hacking incident.

   Why it matters

   The cyberattacks expose new risks as threat actors increasingly leverage advanced agentic artificial intelligence tools to automate complex hacking sequences against critical financial infrastructure. South Korean authorities are investigating the breaches and police are actively reviewing the fallout. The incident has prompted high-level concern from government leaders regarding the vulnerability of financial systems to AI-assisted cyber threats.

   What is confirmed

   • CrowdStrike stated that a China-based suspect used a Chinese-developed artificial intelligence tool and Claude to target South Korean banks.
   • The ARTEX AI agent was used in data theft attacks on South Korean financial firms.
   • The Chinese developer of the ARTEX AI agent made the tool closed-source following the hack.
   • China's Ministry of Foreign Affairs stated it was not well aware of the hacking incident targeting the South Korean financial sector.

   Still unconfirmed

   • The suspect behind the recent cyberattacks at South Korean banks was a 26-year-old operating from Guangdong.

   What to watch next

   • Results of police investigations into the South Korean bank cyberattacks
   • Official responses from South Korean financial regulators regarding new security requirements
   Sources used for this update (21)

   1. WSJ — Hackers Use Chinese AI Tool to Hit South Korean Banks, Exposing New Risk
   2. The Register — South Korean president calls for creation of tools that stop all cyber-attacks
   3. Reuters — CrowdStrike says China-based suspect used AI tools in South Korean bank hacks
   4. NewsNation — Banks increasingly under AI attack: How can you stay safe?
   5. The New York Times — Hacker Used Chinese-Developed A.I. Tool to Target South Korean Banks, CrowdStrike Says
   6. Reuters — Chinese developer makes ARTEX AI agent closed-source after Korean bank hack
   7. Bloomberg.com — Hacker Who Hit Korean Banks Likely from China, CrowdStrike Says
   8. dw.com — South Korea warns of AI-assisted hacking after breach of big banks' cyber defenses
   9. Reuters — South Korea, Japan buffeted by hacks as AI lowers bar for cybercriminals
   10. Yahoo — Chinese AI tool pulled to prevent 'misuse' after South Korea hacks
   11. The Hacker News — ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
   12. www.globalbankingandfinance.com — CrowdStrike: China-Based Suspect Used AI in South Korean Bank ...
   confidence 100%