Authorities suspect the breaches were orchestrated by a single actor using AI-driven automation. Forensic traces of Artex AI were found on infrastructure used against the firms, with 359 linked IPs identified across 14 countries and roughly 1,000 servers related to CyberStrikeAI. While the specific use of Artex in the bank attacks remains unconfirmed, the financial regulator stated that "AI attacks defended by AI" is the necessary response.
