South Korea Investigates Possible Use of A.I. in Hackings on Its Banks

Live updates

1. 1h ago

   South Korea Investigates AI-Driven Cyberattacks on Financial Institutions

   South Korean authorities are investigating a series of bank cyberattacks that leaders state involved artificial intelligence models. CrowdStrike Intelligence reported that attackers used an open-source agentic penetration testing tool developed in China called ARTEX alongside large language models to breach financial firms. The campaign resulted in data exfiltration from organizations including Shinhan Bank and Yegaram Savings Bank between late September and early October 2026. In response to the incidents, South Korean leadership has called for enhanced cybersecurity tools while the Chinese AI tool creator pulled access to prevent misuse.

   Why it matters

   The recent cyber incidents expose a growing risk of threat actors leveraging accessible artificial intelligence and penetration testing applications to target critical financial infrastructure. South Korean authorities have intensified efforts to track the hackers behind these automated breaches. The developer of the ARTEX tool intervened by restricting source code access following the disclosure of its use in the bank attacks.

   What is confirmed

   • South Korean President Lee stated that artificial intelligence appears to have been used in recent bank hacks.
   • CrowdStrike Intelligence reported that threat actors used an artificial intelligence penetration testing tool named ARTEX and large language models.
   • The campaign occurred between late September and early October 2026, leading to data exfiltration from firms including Shinhan Bank and Yegaram Savings Bank.
   • The Chinese AI cybersecurity tool ARTEX stopped programmers from accessing its source code after acknowledging misuse by bad actors.

   What to watch next

   • Further official findings from South Korean authorities identifying the hackers behind the cyberattacks
   • Additional security measures or tools deployed by banks to defend against AI-assisted breaches
   Sources used for this update (18)

   1. www.southwest.com — Southwest Airlines | Airline Tickets and Low Fares
   2. en.wikipedia.org — South - Wikipedia
   3. WSJ — Hackers Use Chinese AI Tool to Hit South Korean Banks, Exposing New Risk
   4. Reuters — South Korea's Lee says AI appears to have been used in bank hacks
   5. The New York Times — South Korea Investigates Possible Use of A.I. in Hackings on Its Banks
   6. Financial Times — AI models used in bank cyber attacks, warns South Korea’s president
   7. The Hill — President of South Korea believes AI models were used in bank hacks
   8. The Register — South Korean president calls for creation of tools that stop all cyber-attacks
   9. WSJ — The Morning Risk Report: Hackers Use Chinese AI Tool to Hit South Korean Banks, Exposing New Risk
   10. www.koreatimes.co.kr — Korea intensifies efforts to track hackers behind bank cyberattacks
   11. techxplore.com — Chinese AI tool pulled to prevent 'misuse' after South Korea hacks
   12. securityaffairs.com — AI-Driven tool ARTEX used in attacks against South Korean Banks
   confidence 90%