ARTEX AI, Claude agents used in cyberattacks on South Korean banks

A Chinese-speaking threat actor leveraged ARTEX AI, a penetration testing suite, alongside Claude AI agents to conduct sophisticated attacks against multiple major South Korean financial institutions, resulting in client data and credit card information exposure as well as system outages. The incident highlights the dual-use danger of AI-assisted security tools, which can be repurposed by adversaries to automate and accelerate cyberattacks at scale. The discovery of Claude Code session histories and memory files in the attacker's infrastructure suggests insufficient monitoring of AI tool usage and inadequate controls around sensitive data environments. Financial institutions must recognize that AI-augmented threats can outpace traditional defenses, making proactive detection and layered security controls essential. This attack underscores the urgent need for banks to monitor for AI-driven attack patterns and enforce strict data access boundaries around customer financial records.