Project
ARTEX is a Chinese-language, AI-driven autonomous penetration testing console that automates network intrusion and exploitation tasks.
Recorded Future says TAG-217 was testing infrastructure and assembling attack tools in August 2026, weeks before South Korea's bank breaches surfaced. Insikt says exposed directories gave it the timeline and give defenders openings to spot related activity.
Reality
Zscaler ThreatLabz says a threat actor used the ARTEX AI pentest framework to steal personal data on about 67,000 people from South Korean financial firms. Entry was through peripheral web apps. Zscaler rates its attribution to a Chinese-speaking, financially motivated actor at moderate confidence.
Reality
SK Telecom requires outside suppliers to submit a software bill of materials and now distributes BomLens on GitHub to help produce one. Its view of open-source risk in purchased software rests on how accurately vendors scan their own code.
Reality
ARTEX's developer made the open-source agent closed-source on October 8 after CrowdStrike linked it to a China-based 26-year-old who breached South Korean banks. The campaign exposed roughly 68,000 customer records, Cryptobriefing reported.
Perspective Coverage
5 publishersReality
President Lee Jae Myung says AI appears to have been used in hacks on South Korean banks that leaked data on at least 25,000 Shinhan customers. If his claim that AI removes the need for specialized skills holds up, banks should plan for many more attackers.
Perspective Coverage
18 publishersReality
Japan's FSA asked banks and crypto exchanges to swap photographed-ID checks for IC-chip reading now, ahead of an April 1, 2027 deadline. The request follows a Times Car breach of about 1.6 million license images, Cryptopolitan reported, and leaves each firm to decide whether to pay for the switch this year or wait for the law.
Reality
A single actor used a free Chinese pentest agent and four commercial AI models to breach South Korean financial firms in about two weeks. The free, resold toolkit let one person breach several firms at once, and researchers expect adversaries to keep using it to lift their tempo.
Reality
CrowdStrike tied AI-assisted South Korean bank attacks, run on an open-source pentest tool and DeepSeek, to a possible 26-year-old suspect in Guangdong. The reported breaches involved systems banks run for brokers and staff, so the exposure to manage sits at the bank's edge, whoever the attacker proves to be.
Perspective Coverage
6 publishersReality
South Korea's FSC paused a plan to open bank network-separation exemptions to 75 firms after ARTEX-assisted hacks breached seven financial firms. The pause holds back at most 15 exemptions while regulators work out whether the attacker got in through the rule they were loosening or around it.
Perspective Coverage
8 publishersReality
South Korea's financial regulator gave lenders until Thursday to check every internet-facing system after hackers breached at least seven banks. Attackers entered through tools built for loan recruiters and staff, so the repair falls on how much credit data banks let outsiders see.
Reality