CrowdStrike finds possible bank hacker's CV among exposed AI logs

What's happening

CrowdStrike says investigators found an exposed set of AI interaction logs that include what looks like a hacker's CV and show use of Claude Code and the agentic penetration tool ARTEX in attacks on South Korean banks. Reports note the actor used a combined stack that included ARTEX, DeepSeek v4.1-Flash, GLM-5.3, Grok 4.6, and Claude Code. South Korean officials say AI agents appear to have been used to hack some of the country's biggest banks last week, and the logs suggest the suspected actor may be a Chinese speaker.

Why it's trending

Because investigators recovered AI conversation logs and tooling details that link agentic open-source models to a recent, high-profile bank intrusion in South Korea.

SignalHolding at its usual pace, confirmed across 3 independent source types.