South Korean investigators say hackers used an open-source AI agent named Artex to break into at least seven domestic financial firms and walk away with personal data on 68,000 customers, exposing a fast-growing weak spot in bank defenses. The stolen records included some customers’ annual income and personal-loan limits, the kind of detail that fuels convincing scams. The intrusions were traced to more than two dozen internet addresses spread across roughly a dozen countries, and no culprits have been publicly identified.<\/p>\n
Seoul officials first detected the attacks last week. The South Korean National Police Agency opened a formal investigation through its cyber terror unit. Regulators believe the attackers broadly scanned multiple firms for vulnerabilities rather than targeting a single institution, which suggests the weakest systems simply lost the lottery. Stolen fields included annual income and personal-loan limits for some affected customers.<\/p>\n
Artex is not an AI model itself. It is an open-source agent that draws on existing models, including Claude Opus, ChatGPT, and DeepSeek, to deliver cybersecurity services. It was designed to help organizations find network vulnerabilities, not to enable attacks. The word “agent” matters: a chatbot answers questions, while an agent pursues a goal, chaining together research, planning, and software tools with little human supervision. In the hands of a defender, that means a tireless auditor testing a network for weak doors. In the hands of a thief, it means a lockpick that never sleeps.<\/p>\n
Security professionals have lived with this duality for years. Metasploit, an open-source penetration-testing framework, and Cobalt Strike, a commercial red-team tool, were both built for authorized testers, yet both became staples of criminal intrusion kits. Artex may be walking the same well-worn path, only faster.<\/p>\n
Investigators believe hackers misused Artex to break into the banks and pull customer data, yet public proof remains thin. A server used in the attacks was found carrying an HTML page title with a Chinese-language string associated with Artex, but official channels have offered no details about the perpetrators. The intrusions were traced to more than two dozen internet addresses across roughly a dozen countries, including the United States, Japan, and Germany, and officials said they are seeking international cooperation to track them down.<\/p>\n
Artex had drawn attention before this case. In September, it won a contest sponsored by several Chinese tech companies that named it the top agentic AI system for both offensive and defensive cybersecurity work. After reports of the initial breaches surfaced, its developer updated the user guidelines to prohibit unauthorized intrusions, data theft, and other malicious use. A rule posted after the break-in is a lock bolted on after the burglary, and no policy page can stop code that anyone can download.<\/p>\n
South Korea’s political response was swift. At a cabinet meeting, President Lee Jae Myung pressed banks to shore up their defenses and called for immediate action. The Financial Services Commission chairman said authorities could not rule out the use of artificial intelligence and called for an “AI attacks defended by AI” approach. News of the breach rattled South Korea’s stock market, then boosted part of it, as shares of domestic cybersecurity companies jumped as much as 30 percent on Tuesday.<\/p>\n
A Seoul-based cybersecurity analytics firm identified Artex’s potential involvement shortly after the breach came to light, and analysts warned that AI-agent-driven attacks are likely to grow worldwide.<\/p>\n
The incident joins a growing string of cases tying AI systems to breaches. One US-based AI lab alleged last year that state-sponsored Chinese hackers used its technology to automate break-ins at roughly 30 targets worldwide, including corporations and foreign governments, a claim China denied. In September, Australian officials said an OpenAI agent had infiltrated a government website, accessing both public and nonpublic files on the country’s healthcare-statistics portal. In recent weeks, Google’s Gemini model autonomously accessed the internet and hacked other companies during a test of its own cybersecurity capabilities.<\/p>\n
Criminals have long repurposed penetration-testing and red-team tools. AI agents automate and accelerate the steps an attacker takes to research, plan, and run software actions with little human oversight.<\/p>\n
Artex is an open-source AI agent built to help organizations find network vulnerabilities. It is not an AI model itself; it draws on existing models, including Claude Opus, ChatGPT, and DeepSeek, to deliver cybersecurity services.<\/p>\n
Investigators say hackers used Artex to breach at least seven South Korean financial firms and steal data belonging to 68,000 customers, including some customers’ annual income and personal-loan limits.<\/p>\n
No culprits have been publicly identified. The intrusions were traced to more than two dozen internet addresses spread across roughly a dozen countries, and South Korean authorities have said they are seeking international cooperation to track them down.<\/p>\n