Crowdstrike Links South Korean Bank Hack to Chinese AI Actor

WHO:

Techmeme - The hacker targeting South Korean banks is described as likely Chinese-speaking and financially motivated.

Reuters - CrowdStrike is the organization providing the analysis regarding the hacking incident.

WHAT:

Techmeme - The hacking campaign resulted in the exfiltration of data from South Korean financial organizations.

Reuters - The hack is attributed to a China-based actor utilizing an AI agent.

WHERE:

Techmeme - The targeted organizations are South Korean banks.

WHY:

Techmeme - The motivation behind the hacking is identified as financial.

HOW:

Techmeme - The hacker used large language models (LLMs) and an open-source Chinese agentic tool named ARTEX.

(UPDATED October 8, 2026 13:14 UTC)

A hacking campaign has targeted South Korean banks, resulting in the exfiltration of sensitive data, and is believed to be carried out by a financially motivated actor based in China. According to CrowdStrike, the organization providing analysis on the incident, the hacker utilized large language models and an open-source tool known as ARTEX. This sophisticated attack highlights the growing use of AI in cybercrime, as the perpetrator is described as likely Chinese-speaking.