$0.88 and 22 seconds: ARTEX AI tool tied to South Korean bank breaches
Between Sept. 28 and Oct. 1, 2026, seven South Korean financial institutions were hit in the same wave of cyberattacks, with more than 68,000 customer records leaked, including 25,729 at Shinhan Bank. A CrowdStrike report dated Oct. 7 said the attacker may be an individual hacker from Guangdong, China, who mainly used the open-source AI penetration-testing agent ARTEX, invoking DeepSeek V4.1-Flash and also using GLM-5.3 and Grok 4.6 in Claude Code sessions. South Korean security firm Everspin's reproduction test said a similar attack took 22 seconds, about 44,000 tokens and roughly $0.88, with attackers targeting peripheral systems such as loan-agency and mobile-work systems rather than core online banking.
The case was publicly linked to AI-driven automated attacks, and South Korean officials said AI is making it easier for people without specialized skills to launch attacks, highlighting the security risk of financial institutions' peripheral systems.
2026年9月28日到10月1日，短短四天，韩国七家金融机构被同一波攻击打穿。新韩银行泄露25,729名客户信息。KB国民银行119名。韩亚银行89名。BNK釜山银行11名。耶加兰储蓄银行约4万名。加上现代资本等机构，累计超过68,000人。韩国总统李在明10月6日在内阁会议上说了一句话：“一些黑客攻击事件出......
本文来自微信公众号： 斯凯碎碎侃 ，作者：斯凯，原文标题：《深度｜0.88美元攻陷一家银行：AI黑客正在改写安全规则》
2026年9月28日到10月1日，短短四天，韩国七家金融机构被同一波攻击打穿。
新韩银行泄露25,729名客户信息。KB国民银行119名。韩亚银行89名。BNK釜山银行11名。耶加兰储蓄银行约4万名。加上现代资本等机构，累计超过68,000人。
#Shinhan Bank#KB Kookmin Bank#Hana Bank#BNK Busan Bank#Hyundai Capital#CrowdStrike#ARTEX#DeepSeek V4.1-Flash#GLM-5.3#Grok 4.6#Claude Code#Everspin