SurveillanceHigh
Attackers Reportedly Used ARTEX, an AI Security-Testing Tool, to Steal Data from South Korean Financial Institutions
- Occurred
- Sep 27, 2026
- Published
- Oct 7, 2026
- Source
- AI Incident Database
Summary
An unidentified attacker reportedly used ARTEX, an AI-powered security-testing tool, alongside large language models to breach South Korean financial institutions and steal data. Compromised systems included a loan-broker inquiry service and an employee mobile work-support system. Researchers linked the activity to exposed attacker infrastructure and AI session histories. The attacker’s identity and the full number of affected institutions remained unconfirmed.
Developers
- AI agent system developers
- Large language model developers
- ARTEX developers
- Autumn-27
- DeepSeek
- Zhipu AI
- xAI
- Anthropic
Deployers
- Cybercriminals
- hackers
- Threat actors
- Agentic threat actors
- AI agent system deployers
Harmed parties
- Shinhan Bank
- KB Kookmin Bank
- Financial institutions
- Bank customers
- Banks
- Privacy
- Information integrity
- General public
- General public of South Korea
- Customers
Classification
Category confidence: 85%
Severity confidence: 90%
Rationale: Targeted campaign against financial organizations with data exfiltration indicates significant security breach and potential surveillance.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8