Mmastodon TechnologyCybersecurity first seen 20 h ago, last 20 h ago, peak #9

CrowdStrike says lone hacker used AI tools to breach South Korean banks

Original: 🤖 CrowdStrike: a single operator used ARTEX, an open-source Chinese agentic pentest tool, plus LLMs, to hit South Korean

CrowdStrike reports that a single operator breached South Korean banks between late September and early October using ARTEX, an open-source Chinese agentic penetration testing tool, alongside large language models. Roughly 68,000 records were exposed through a loan-inquiry service and an employee mobile portal. Analysts note the attackers relied on conventional flaws and cheap, off-the-shelf offensive AI tooling rather than sophisticated custom malware.

Why now: It is an early reported case of a solo attacker weaponising open-source agentic AI tools against financial institutions, raising concerns about AI-enabled cybercrime.

CrowdStrikeARTEXSouth Korea

Open on mastodon →

Evidence

• 🤖 CrowdStrike: a single operator used ARTEX, an open-source Chinese agentic pentest tool, plus LLMs, to hit South Korean banks (late Sept–early Oct). ~68k records exposed via a loan-inquiry service and an employee mobile portal. Conventional flaws, cheap offensive tooling. 🔗… · cloud@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/1842103