ARTEX AI hacking tools and South Korean bank breaches traced by Hunt.io

Tier D · Background noise – Good to know

Who’s exposed: Seven South Korean financial institutions via internet-facing systems

Tier D because: Does not hit tech teams

Reach

Attack

Damage

Fix

Exploited in the wild · Secrets exposed

The Brief

Hunt.io traced ARTEX servers and AI-powered hacking tools used in breaches at seven South Korean financial institutions.
Between late September and early October 2026, data was breached through internet-facing systems at these institutions.
The source excerpt is truncated and gives an incomplete figure of about 66,000 affected records.

Why it matters

Attackers are using AI-powered tooling against internet-facing systems of financial institutions, which shows how exposed services can be compromised at scale.

The checklist behind the tier

Checklist · 2 of 10 yes

No	Hits tech teams	Judgment: affected parties are South Korean banks' internet-facing systems, a non-tech breach exposing their own customers.
No	Core infrastructure	Judgment: no core infrastructure software such as OpenSSH, Linux or GitHub is named as the flawed or compromised product.
No	Popular tool	Judgment: the named products are ARTEX servers and hacking tools, not a widely used framework, platform or package.
Yes	Exploited in the wild	Security Affairs: seven South Korean financial institutions had data breached between late September and early October 2026.
No	Public exploit	Security Affairs: no source mentions published exploit code or a proof-of-concept.
No	Remote, no login	Security Affairs: breaches occurred through internet-facing systems, but no unauthenticated access method is stated.
No	Full takeover	Security Affairs: data breaches are reported, but no code execution, root or admin takeover is stated.
Yes	Secrets exposed	Security Affairs: seven South Korean financial institutions had data breached, with about 66,000 affected.
No	Supply chain	Security Affairs: no source reports a compromised legitimate package, update, build pipeline or signing key.
No	No fix yet	Security Affairs: no source mentions a vendor patch status or missing fix for a vulnerability.

Source

Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches ↗ Security Affairs · 4h ago

First seen 4h ago · 1 source · Full story page · How tiers are decided