INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

AI-powered cyber attacks steal 8.2 million personal information cases nationwide

| 2026-10-27 00:28 HIGH LOW AI-ENABLED ATTACK · AUTONOMOUS DATA BREACH
JSON
Executive Summary
AI-generated
A South Korean man, identified as a 32-year-old individual, has been arrested for allegedly hacking into the computer systems of approximately sixty domestic companies and institutions using AI-powered tools between August 31st and October 13th. The suspect is accused of stealing personal information from around eight million people, with forty-eight companies confirmed to have been affected by an extortion demanding a total of 300,000 won. The attackers used traditional website vulnerability scanning tools initially but later switched to AI-powered tools like the 'ARTEX' autonomous penetration testing tool. As of now, only one company has paid the demanded amount, and the remaining amount is still unpaid.
Technical Mitigations AI-generated
• Block or hunt for 'ARTEX' (Artek) autonomous penetration testing tool • Detect and patch vulnerabilities in systems using traditional website vulnerability scanning tools, such as those used by the suspect before switching to AI-powered tools • Monitor server access records and related evidence for signs of hacking activity
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
healthhealth educationeducation
Incident Timeline
‎September 2025
Threat actors used AI-powered tools to breach the computer systems of institutions between September 2025 and October 2026.
‎October 2026
Threat actors used AI-powered ARTEX (Artek) autonomous penetration testing tool to breach computer systems of institutions across the country.
organisation ARTEX
The crime involved the use of the AI autonomous penetration testing tool 'ARTEX' (Artek), which was also used in recent domestic financial sector hacking incidents.
organisation Artek
The crime involved the use of the AI autonomous penetration testing tool 'ARTEX' (Artek), which was also used in recent domestic financial sector hacking incidents.
‎between 2019 and 2022
Threat actors used AI-powered tools to target victims between 2019 and 2022.
‎August 31st to October 13th
Threat actors, identified as ASsi using AI-powered tools, hacked into approximately sixty companies in South Korea over a forty-four-day period from August 31st to October 13th.
target_region Korea, Republic of
South Korean police investigation found that ASsi (individual) hacked into approximately sixty companies using AI from August 31st to October 13th, for a total of forty-four days.
Intelligence Sources
Dailysecu 2026-10-27