AI Tool ARTEX Confirmed in Shinhan Bank Data Breach

• •ARTEX AI confirmed as the tool used in Shinhan Bank data breaches.
• •Credential stuffing attacks exploited reused login credentials across services.
• •Investigation scope may expand to include two additional savings banks.

An investigation by the Korea Financial Security Institute has confirmed that the AI-based penetration-testing tool ARTEX AI was used in a series of personal data breaches at Shinhan Bank and potentially other South Korean banks. The breaches involved credential stuffing attacks, where stolen login credentials were reused across multiple services. The investigation traced attack IPs and server logs, verifying the involvement of ARTEX AI, which is designed for penetration testing but can be misused for automated attacks. The breach's scope may widen as two additional savings banks are under investigation. The security community is increasingly concerned about the implications of AI-driven automation in cyberattacks, as the tool is primarily distributed through GitHub and aimed at Chinese-speaking users. The Financial Security Commission plans to recommend a comprehensive audit of internal systems to prevent further incidents.