Analysis: the hacker who targeted South Korean banks is likely Chinese-speaking, financially motivated, and used LLMs and open-source Chinese agentic tool ARTEX (Ashley Campion/CrowdStrike)

CrowdStrike’s analysis suggests a financially motivated threat actor targeting South Korean financial institutions, with evidence of data exfiltration and the use of LLMs plus an open-source Chinese agentic tool, ARTEX, to scale operations. For CIOs and technology leaders, this underscores that AI-assisted attack tooling is lowering the barrier to more adaptive, efficient intrusions, increasing pressure on IT and security teams to improve detection, identity protections, and data loss controls across high-value systems.