Attack on 7 South Korean financial firms exposed data of about 68,000 people

The Wall Street Journal reports attackers used the automated penetration-testing tool Artex in incidents at seven South Korean financial institutions, including Shinhan Bank, KB Kookmin Bank and Hyundai Capital. Data on about 68,000 people, including names, contact details, ID numbers and income, was exposed; authorities warn of a second wave of phishing.

• Affected firms include Shinhan Bank, KB Kookmin, Hana Bank and Hyundai Capital
• About 40,000 Yegaram customers and 25,000 Shinhan customers hit
• AhnLab found Artex traces on roughly 600 IP addresses worldwide
• Artex is an open-source pentest tool that delegates tasks to Opus, GPT and DeepSeek