Financially motivated group used AI tools including Claude Code, DeepSeek and Grok in South Korean bank attacks
AI SECURITYClaude Coderedteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A financially motivated threat actor used ARTEX, Claude Code and several large language models in a campaign against South Korean financial organisations, with intrusions leading to data theft between late September and early October 2026. Exposed attacker directories revealed session histories, configurations and operational scripts showing how AI tooling supported the attacks. CrowdStrike's 7 October investigation made an assessment, but the article is cut off before stating it.
For IT people · Written by AI from 1 source · Wrong?
What to do
- No action needed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Companies
Products