Episode Details

Hey! I'd love to hear your thoughts, send me a voice note.

Since late September, cyberattacks have exposed personal data on tens of thousands of South Korean bank customers, and the evidence increasingly suggests the attacker relied on AI tools. These include ARTEX, a free program that splits hacking work among several AI agents, along with models from DeepSeek, Zhipu AI and xAI. It looks like one of the clearest public cases of AI hacking tools being used against real banks, and it shows the limits of safeguards built into any single AI model.

In this episode

• What happened: the breaches at Shinhan, KB Kookmin, Hana and other lenders, about 68,000 people affected by one estimate, and how South Korea's government has responded
• The three main strands of AI evidence: a tool name on an attack server, an official's account, and the attacker's own exposed files analyzed by CrowdStrike
• Why the evidence points to AI assisting a human hacker, not acting on its own, and why the techniques themselves were familiar
• Why attribution is uncertain and many details are still preliminary
• Why safeguards built into one company's model would see only part of an operation that mixes free tools and several AI providers

Bottom line

Officials and researchers have produced substantial evidence that an attacker used AI tools to help breach several banks, though official findings are pending. The case is an early real-world example of AI lowering the skill and time needed for an attack, and of how single-product safeguards cover only part of the risk.

Sources and further reading

• CrowdStrike report on ARTEX and Korean finance (Oct. 7, 2026)
• ARTEX project on GitHub
• Herald Corporation on Shinhan attack logs (Oct. 3, 2026)
• The New York Times on South Korea's investigation (Oct. 6, 2026)
• The Record on officials' AI-agent suspicions (Oct. 6, 2026)
• Korea Times explainer (Oct. 7, 2026)
• BleepingComputer on the regulator's response (Oct. 5, 2026)
• The Register on CrowdStrike's findings (Oct. 8, 2026)
• RuntimeWire on AhnLab's ARTEX count (Oct. 6, 2026)
• Daily AI Safety: A Downloadable Hacker (Oct. 2, 2026)

This post was written by Claude and fact checked by Nathan Nguyen.