Executive Summary
CrowdStrike reports a campaign against South Korean financial firms, active late September to early October 2026, that used an AI pentesting tool named ARTEX and ended in data exfiltration.
What Happened
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early October 2026, and resulted in data exfiltration from various South Korea-based financial firms,
Affected Products
- ARTEX
Vulnerability / Attack Technique
Misuse of an AI pentesting tool for intrusion and data theft
Technical Mechanism
Attackers used ARTEX, an AI-driven penetration testing tool, to carry out the intrusions that led to exfiltration.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
Relevant Frameworks
RealGround Analysis
Offensive AI tools built for testing are being used by attackers. RealGround analysis: financial firms should assume automated, AI-driven reconnaissance and exploitation.
Recommended Controls
- Monitor for automated scanning and exploitation patterns
- Patch internet-facing systems quickly
- Watch for large outbound data transfers
Related RealGround Service
AI Agent Business Logic Audit · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/10/artex-ai-pentesting-tool-used-in-data.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-17.