AI 渗透测试工具 ARTEX 被指助单人攻破多家韩国银行
AI-powered hacking tools enabled a likely single attacker to breach multiple South Korean banks
CrowdStrike 报告称，一名疑似中文使用者于 2026 年 9 月底至 10 月初攻击多家韩国金融机构，仅新韩银行就有超过 25000 条含姓名、联系方式、收入和信用额度的记录被窃取。攻击者使用了 7 月首次发布在 GitHub 上的中国开源工具 ARTEX，该工具借助 AI 语言模型自动进行渗透测试，背后模型为 DeepSeek v4.1-flash、GLM-5.3 和 Grok 4.6。研究人员还在攻击者开放的目录中发现 Claude Code 会话日志，显示其搜索出售被盗数据的 Telegram 群组。
正文
当前显示原文，中文全文译文尚未就绪。
Crowdstrike reports on an infrastructure hack in South Korea. A suspected Chinese-speaking attacker hit multiple South Korean financial institutions between late September and early October 2026, stealing large amounts of data. At Shinhan Bank alone, more than 25,000 records with names, contact details, income, and credit limits were stolen, according to Korean newspaper Khan . South Korea's financial regulator held an emergency meeting. President Lee Jae Myung called for a thorough investigation.
The attacker used ARTEX , a Chinese open-source tool first posted on GitHub in July that uses AI language models for automated penetration testing, meaning it finds security flaws on its own. The models behind it were DeepSeek v4.1-flash, GLM-5.3, and Grok 4.6. Researchers found Claude Code session logs on the attacker's open directories, showing searches for Telegram groups to sell stolen data.
Crowdstrike says the case shows how AI tools can let a single person pull off massive breaches in a short window, the kind of cybersecurity risk experts have been warning about for months . Just days earlier, Anthropic documented that GLM-5.3 can write exploits nearly on par with Mythos Preview , Anthropic's frontier model and the one that sparked the entire debate in late March 2026 .