CrowdStrike: AI-Assisted Attacks on Nine South Korean Banks Exposed via Claude Code Logs
CrowdStrike published a technical analysis of AI-assisted attacks on nine South Korean financial institutions, with data leaks affecting over 65,000 people. Claude Code session histories and ARTEX configuration files left in a public directory revealed the use of DeepSeek, GLM-5.3, and Grok 4.6.
- Nine South Korean financial firms targeted, leaks confirmed at seven
- Data on more than 65,000 people affected, including Shinhan Bank and Yegaram
- ARTEX used DeepSeek v4.1-flash, plus GLM-5.3 and Grok 4.6
- Logs contained a resume of a 26-year-old in Guangdong, but no definitive attribution
Read next
Security