CrowdStrike said attackers tied to recent data breach incidents involving multiple South Korean banks used ARTEX, an open-source AI penetration testing tool developed in China, and also relied on models including DeepSeek, GLM-5, and Grok during the operation. According to the report, exposed Claude Code session logs from an open directory on an attacker-controlled server showed the threat actors asking how to sell stolen South Korean data and how to find related Telegram trading groups. The same session history also contained a draft resume for a "security researcher" that listed an address in Maoming, Guangdong, an age of 26, and a Telegram contact. CrowdStrike said those details likely belong to the attacker. The report comes as South Korean President Lee Jae-myung has already raised public concern in a cabinet meeting over the use of AI in hacking attacks.
CrowdStrike said attackers behind recent data breach incidents involving multiple South Korean banks used ARTEX, an open-source AI penetration testing tool developed in China, and asked in Claude Code sessions how to sell stolen South Korean data and where to find related Telegram trading groups.
The cybersecurity firm also said the campaign used AI models including DeepSeek, GLM-5, and Grok.
Exposed Claude Code logs included a draft resume
According to the report, an open directory on an attacker-controlled server exposed Claude Code session history. The logs also contained a draft resume for a "security researcher" listing an address in Maoming, Guangdong, an age of 26, and a Telegram contact. CrowdStrike said those details likely belong to the attacker.
South Korean president raised concern over AI-assisted hacking
The report said South Korean President Lee Jae-myung mentioned in a cabinet meeting that public concern has grown over the use of AI in hacking attacks.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
