ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Cybersecurity researchers from CrowdStrike Intelligence have uncovered a targeted campaign against South Korean financial organizations using an AI-powered penetration testing tool called ARTEX. The campaign was active from late September to early October 2026 and resulted in successful data exfiltration. Threat actors leveraged ARTEX, an AI-based pen testing tool, to conduct offensive operations against financial sector targets. The attacks highlight the emerging risk of AI-assisted offensive security tools being repurposed for malicious data theft campaigns. The financial sector in South Korea appears to have been specifically targeted, raising concerns about sector-specific threat activity in the region.