Officials believe open-source agent helped breach South Korean financial institutions

Topics and information types

网络安全人工智能

Back Rohan Paul

Rohan Paul· @rohanpaul_ai · X· 2026-10-09 14:47 · Original publication time AI score46

Automatically verified and published · Generated and evidence-checked automatically; not reviewed by a human.

AI introduction

The account says the attacker's Claude Code session histories, Claude memory files and ARTEX configurations were exposed in open directories. Officials believe an open-source Chinese agent helped breach at least seven South Korean financial institutions. It says ARTEX ran on DeepSeek v4.1-flash, but describes its API access and the host's role in the attacks as uncertain.

Article · Original

The article text is unavailable in this language; an existing version is shown.

The attacker who breached South Korean banks asked Claude where stolen Korean data sells.

> And Officials believe an open-source Chinese agent helped breach at least 7 South Korean financial institutions.

> The attacker’s own Claude Code session histories, Claude memory files and ARTEX configurations sat in open directories, giving a direct view of how an AI-assisted intrusion campaign against South Korean finance was run.

> ARTEX, a recently released Chinese open-source agentic pentesting tool, ran on DeepSeek v4.1-flash, likely reached through an API reseller, from a host that probably carried out the Korean attacks.

Found an error? Send a correction