Financial Services Commission (Organization): news timeline & CVEs

Chinese Hacker Deployed AI in Campaign Against South Korean Banks

A suspected Chinese attacker used ARTEX and Claude to breach South Korean banks and steal customer data.

CrowdStrike says a financially motivated, likely Chinese-speaking attacker used the open-source agentic tool ARTEX and Anthropic's Claude from late September to early October 2026 to find vulnerabilities and compromise South Korean financial firms. Attacker infrastructure used DeepSeek v4.1-flash as ARTEX's main model, plus GLM-5.3 and Grok 4.6, and Claude was asked to find Korean Telegram groups for selling stolen data. Shinhan Bank and Yegaram Savings Bank reported breaches affecting about 25,000 and 40,000 people. South Korea's Financial Services Commission warned customers on October 6 about phishing and loan scams.

Infosecurity Magazineupdated 14:12 UTC · 7h agofirst 11:00 UTC · 10h agoThreat actor in the wild 4 sources1

South Korea probes bank breaches amid suspected AI-powered attacks

South Korea is investigating confirmed data breaches at Shinhan, Kookmin, and Hana banks amid suspected AI-assisted attacks.

South Korea's Financial Services Commission held an emergency meeting after cyber incidents at major banks and confirmed a data breach at Shinhan Bank. Local reports say Shinhan exposed details of about 25,000 customers and KB Kookmin Bank leaked credit-card information for 119,000 clients, while Hana Bank suffered a limited compromise of a sales-support system. Authorities ordered inspections of externally accessible systems, tighter access controls, and rapid sharing of threat information with KISA. Yonhap reported that a server used in the attacks referenced ARTEX AI, an open-source agentic penetration-testing system, but banks and regulators have not confirmed that tool was used.

BleepingComputerupdated 09:24 UTC · 12h agofirst Oct 5, 14:22 UTC · 3d agoData breach in the wild 6 sources

South Korea Orders Investigation Into AI-Powered Cyberattacks on Major Banks

South Korea's president ordered an investigation into breaches at major banks exposing ~65,000 customers' data; infrastructure tied to AI pen-testing framework ARTEX AI.

President Lee Jae Myung ordered a comprehensive investigation after Shinhan Bank disclosed a breach affecting about 25,000 customers, with KB Kookmin, Hana Bank, BNK Busan Bank, Yegaram Savings Bank (~40,000 customers) and Hyundai Capital (146 loan agents) also reporting exposures. Leaked data included names, phone numbers, annual income, loan limits and some resident registration numbers, though no payment credentials or unauthorized transactions were found. Investigators found a Chinese-language string reading 'AI autonomous penetration testing console' on infrastructure linked to the Shinhan intrusion, associated with the open-source ARTEX AI framework, but actual use of the tool is unproven; reports tie the incident to credential stuffing. The Financial Services Commission held an emergency sector-wide meeting and regulators are pushing AI-driven detection, credential-stuffing monitoring, and phishing-resistant MFA.

GBHackersupdated 09:24 UTC · 12h agofirst Oct 5, 04:58 UTC · 3d agoData breach 6 sources

Financial Services Commission

Timeline3 articles

Appears with

Chinese Hacker Deployed AI in Campaign Against South Korean Banks

South Korea probes bank breaches amid suspected AI-powered attacks

South Korea Orders Investigation Into AI-Powered Cyberattacks on Major Banks