Chinese Hacker Used AI Tools to Breach South Korean Financial Firms

A Chinese-speaking threat actor successfully deployed artificial intelligence tools to breach data at South Korean financial firms, according to a report by Infosecurity Magazine citing findings from CrowdStrike. The security firm revealed that the attacker utilized the agentic pentesting tool ARTEX in conjunction with the large language model Claude to facilitate the intrusion.

The incident highlights a shift in how threat actors are leveraging generative AI to enhance their offensive capabilities. By integrating ARTEX, a tool designed for autonomous penetration testing, with Claude, the hacker was able to automate and accelerate the process of compromising the targeted systems. CrowdStrike’s analysis indicates that this combination allowed the attacker to breach the security perimeters of the South Korean banks more effectively than traditional manual methods might have permitted.

The Role of AI in the Attack Chain

The use of ARTEX and Claude represents a notable evolution in cyberattack methodologies. ARTEX is an agentic pentesting tool, meaning it can perform actions and make decisions autonomously to some degree. When paired with a sophisticated language model like Claude, the attacker could potentially generate code, analyze system responses, and adapt strategies in real time.

CrowdStrike’s discovery of this specific toolset suggests that the hacker is technically proficient and willing to adopt emerging technologies to gain an advantage. The report does not specify the exact version of the tools used or the precise timeline of the breach, but it confirms that the data compromise was successful. This case serves as an early indicator of how agentic AI tools are moving from theoretical risk to practical application in active cyber campaigns.

Impact on South Korean Financial Sector

The targets of this campaign were South Korean financial firms, a sector that is frequently targeted due to the high value of the data it holds. The successful breach of these institutions underscores the vulnerability of even well-resourced organizations to advanced, AI-assisted attacks. The specific banks affected were not named in the report, but the sector-wide implication is significant.

Security professionals in the financial industry are now on higher alert for similar tactics. The combination of autonomous testing tools and generative AI lowers the barrier for entry for sophisticated attacks and increases the speed at which vulnerabilities can be exploited. This incident adds to the growing body of evidence that AI is not just a defensive asset but also a potent weapon for adversaries.

What should you do?

Organizations should monitor for unusual automated behavior in their networks, as agentic tools can mimic human-like interaction patterns. Security teams should review their detection rules to ensure they can identify the specific signatures or behaviors associated with known pentesting tools being used maliciously. Additionally, keeping an eye on emerging AI-based threat intelligence is crucial for staying ahead of evolving attack vectors.

Background: Generative AI

Generative AI creates content from prompts. Agentic AI performs actions using tools. The former outputs text or code; the latter changes system states. Understanding this distinction is critical for security architecture, as agentic systems introduce execution risks that pure generation models do not possess.

Read the full guide: Generative AI vs Agentic AI: Architectural Differences and Security Risks

What to do and how to stay safe: CrowdStrike

• Monitor network logs for automated or high-frequency scanning activity that may indicate the use of agentic tools.
• Review access controls and ensure that sensitive data is properly segmented to limit lateral movement.
• Update threat detection signatures to include indicators of compromise related to known offensive AI tools.
• Educate security teams on the capabilities of agentic AI to improve incident response planning.

Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What tools did the hacker use?

The hacker used the agentic pentesting tool ARTEX and the AI model Claude.

Who discovered this campaign?

CrowdStrike identified the campaign and reported the use of these AI tools.

Who was targeted?

South Korean financial firms were the targets of this data breach campaign.