Shinhan Bank

Headlines · 4

1. 5d
   $0.88 and 22 seconds: ARTEX AI tool tied to South Korean bank breaches

   Between Sept. 28 and Oct. 1, 2026, seven South Korean financial institutions were hit in the same wave of cyberattacks, with more than 68,000 customer records leaked, including 25,729 at Shinhan Bank. A CrowdStrike report dated Oct. 7 said the attacker may be an individual hacker from Guangdong, China, who mainly used the open-source AI penetration-testing agent ARTEX, invoking DeepSeek V4.1-Flash and also using GLM-5.3 and Grok 4.6 in Claude Code sessions. South Korean security firm Everspin's reproduction test said a similar attack took 22 seconds, about 44,000 tokens and roughly $0.88, with attackers targeting peripheral systems such as loan-agency and mobile-work systems rather than core online banking.

   虎嗅 AI · 🔥 0
2. Oct 12
   AI pentest agent ARTEX reportedly used in cyberattacks on nine South Korean banks

   Between late September and early October 2026, nine South Korean financial institutions suffered customer data leaks reportedly involving at least 65,000 personal and credit records, prompting a round-the-clock government cybersecurity emergency and a presidential order for a full investigation. A CrowdStrike report says the core tool was ARTEX, an open-source AI penetration-testing agent using models including DeepSeek, Claude Code and Grok and likely run by a single human operator — an assessment made with moderate confidence; damage hit peripheral systems rather than core clearing networks, with Shinhan Bank losing data on about 25,000 customers, while at least two banks reportedly repelled the same attack. ARTEX, built by a Chinese security engineer, appeared on GitHub in July 2026 and won Baidu's "agent+" challenge in August, and after disclosure its developer said on October 8 it would go closed source and disclaimed responsibility; the article also cites a late-September 2026 FTC probe of Anthropic and OpenAI and notes identified attack infrastructure was spread across the US (65.7% of IPs), China (14.8%) and Hong Kong (10.9%).

   虎嗅 AI · 🔥 0
3. Oct 10
   CrowdStrike: Korean bank hacks used ARTEX AI pentest tool with DeepSeek and Claude Code

   CrowdStrike reported on 7 October that an attack campaign against South Korean financial institutions used the AI penetration-testing tool ARTEX, with DeepSeek as its main model backend and Claude Code used alongside it. South Korean media reported data leaks at at least seven institutions including Shinhan Bank, KB Kookmin Bank and Hana Bank; roughly 25,000 Shinhan customers had names, phone numbers, annual income and loan limits exposed after attackers bypassed authentication to reach a loan-broker lookup service. ARTEX author Autumn-27 said on 8 October that the project was going closed-source with no further updates or support because of misuse, and the original GitHub repository became inaccessible, though hundreds of forks mean source backups and localized copies remain available online.

   虎嗅 AI · 🔥 0
4. Oct 7
   CrowdStrike links South Korean bank breaches to AI tool ARTEX, Claude Code

   A CrowdStrike report published Oct. 7 says a likely Chinese-speaking, financially motivated attacker breached multiple South Korean financial institutions between late September and early October 2026, stealing large amounts of customer data — about 25,000 Shinhan Bank records alone, including names, contact details, income and credit limits. The report says the attacker used ARTEX, a free Chinese open-source autonomous penetration-testing tool built on AI language models, along with Anthropic's Claude Code; chat logs left on the attacker's servers included searches for where to sell the stolen data. President Lee Jae Myung ordered a thorough investigation, and police opened a formal probe on Oct. 6 covering seven financial firms.

   TechRepublic · 🔥 0

Experience and discussion from the community

Share my Shinhan Bank experienceAsk about Shinhan Bank