CrowdStrike Says ARTEX AI Pentesting Tool Was Used Against South Korean Financial Firms

CrowdStrike said it identified infrastructure tied to a late-September-to-early-October campaign against South Korean financial organizations that resulted in data exfiltration, with the attacker using ARTEX, an agentic AI penetration-testing tool, alongside multiple large language models. The company said exposed directories on attacker-controlled servers contained Claude Code session histories, ARTEX configuration files and Claude memory files, giving investigators an unusually direct view into how the operation was run.