The attacks breached 7 South Korean financial institutions and exposed the personal data of approximately 68,000 customers, though no money was reported stolen. To execute the intrusions, the perpetrator utilized ARTEX, an open source Chinese AI agent, in combination with AI models including DeepSeek v4.1-Flash, GLM-5.3, and Grok 4.6. President Lee Jae Myung ordered a sweeping investigation into the incidents, which are considered some of the first known AI powered intrusions into the global financial system.
Tuesday, October 20, 2026
Story
AI Written Resume Exposes Chinese Suspect in First AI Bank Hacks
Cybersecurity13 days ago
A 26 year old attacker believed to be based in China exposed his own identity after leaving his server folders accessible to the public. The suspect, identified as a student at South China University of Technology in Guangdong, used Claude Code to draft a professional résumé that listed his phone number, Telegram handle, and name while detailing his hacking activities. CrowdStrike uncovered this information, along with chat logs where the suspect asked the AI where to sell stolen Korean data, by discovering "CLAUDE.md" files on an unsecured server with directory listing enabled.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.