South Korean President Lee's government says AI agents appear to have been used to hack the country's banks; official investigation findings confirming — or refuting — agent-directed intrusion decide whether state-attributed AI-agent attacks on financial infrastructure become documented fact.

state: corroboratedheat: lowuncertainty: mediumnovelscott: highagentic-security ai-agent-intrusion financial-infrastructureLee Jae-myungSouth Korea

What is this?

In early October 2026, South Korean President Lee Jae-myung told his cabinet there are 'signs' AI models were used in a wave of cyberattacks that leaked customer data at more than seven financial institutions — Shinhan Bank (~25,000 customers), Hana, KB Kookmin, BNK Busan and nonbank firms — and ordered a swift investigation; police formed a 28-member task force and the FSS shared 28 unique IP addresses as indicators with the sector. Reporting (TechTimes, citing researcher Moon Jong-hyun of Genians and Financial Security Institute log analysis) points to ARTEX AI, an open-source LLM-driven autonomous penetration-testing tool whose Chinese-language console string was found on a suspected attack server, while the opposition has floated North Korean cyber units — but investigators have confirmed neither the AI-agent role nor any state actor, so the hypothesis's 'state-attributed' framing remains an open question, not a finding. If the agent role is confirmed, this would be the largest documented agentic attack on financial infrastructure to date, following Australia's September disclosure that an OpenAI agent breached a government health data portal.

Why it matters to Scott

No position of Scott's is challenged or newly adopted by anyone here, but the case lands squarely on a canon cluster: attributing agent-executed intrusions from thin traces (ARTEX AI's console string, shared IPs) ahead of verification is precisely the content-trace-to-identity guess his attribution-provenance-ceiling warns against, and the official task-force investigation is a real-world instance of his claim-bounded adversarial verification — a bounded pass that can support, downgrade or reject the head-of-government claim, making this a dated-receipt tracking and publishing opportunity whichever way it resolves. It also extends the radar's autonomous-hacking lineage into a new regime — an open-source dual-use pentest harness allegedly deployed at national financial-infrastructure scale, distinct from the frontier-model episodes already tracked — though until findings land it informs his argument rather than changing what he builds.

dev:concept.attribution-provenance-ceilingdev:concept.claim-bounded-adversarial-verificationradar:concept.autonomous-hackingradar:concept.offensive-securityradar:hermes-thai-finance-ministry-attackradar:asia-government-multi-agent-intrusionsradar:cyberstrike-offensive-security-harness

queries asked of Scott's wikis

agent harness autonomy limits, tool permissions, sandboxing guardrails
autonomous LLM penetration-testing agents, dual-use security tooling
open-weights misuse — cyber offense capability of local/open models
AI hacking attribution epistemics — verifying 'the agent did it' claims
frontier lab cyber capability evals and agent release gating
agentic security — agent as attack target vs agent as weapon

Measured heat

now 0 pts/hpeak 148 pts/hcomments 0/hpeers p26momentum: steady3 platformsage 147h

points/hour across evidence · reading as of 2026-10-12 02:59:37.977291+11:00 · deterministic, not a model opinion

How the heat travelled

10-05 13:00	⭐ origin echo-reconstructed	Official KTV broadcast of the 43rd State Council (Cabinet) meeting chaired by President Lee Jae-myung, 2026-10-06 10:00, Blue House main hal President Lee Jae-myung (remarks published by KTV 이매진, the Korean government's official policy broadcast channel) on youtube (echo) · attributed from hn.story.49985861	—
10-06 23:50	first on hacker news · published · +34.8h	South Korea says AI agents appear to have been used to hack the country's banks thoughtpeddler	—
10-08 10:11	first on r/LocalLLaMA · published · +69.2h	Last week some of South Korea's biggest banks were hit by a cyberattack. We now know the entire hack may have been done by a single person. He used a combined stack of an open-source AI penetration tool named ARTEX, DeepSeek v4.1-Flash, GLM-5.3, Grok 4.6, and Claude Code (CrowdStrike) Nunki08	—
10-10 04:41	first on r/singularity · published · +111.7h	Humans weaponizing AI phronesis77	—
10-06 23:50	amplified on hacker news	hn.story.49985861 thoughtpeddler	peak 100 · 32 comments · 17% of case engagement
10-08 10:11	amplified on r/LocalLLaMA 👑	reddit.post.1x0n4pt Nunki08	peak 921 · 185 comments · 81% of case engagement
10-09 18:05	amplified on hacker news	hn.story.50024429 01-_-	peak 1 · 0 comments · 0% of case engagement
10-10 04:41	amplified on r/singularity	reddit.post.1x269hr phronesis77	peak 4 · 12 comments · 1% of case engagement
10-11 13:31	amplified on hacker news	hn.story.50043132 Brajeshwar	peak 1 · 0 comments · 0% of case engagement
10-07 03:22	our radar first saw it · +38.4h	discovery anchor: hn.story.49985861	—
10-10 00:31	reached heat=high · +107.5h · via ledger	—	—

pace: p93 vs 1247 stories at the 96h mark (now 147h old) — ahead of openai-hugging-face-rogue-agent-incident (1.0x), behind qwen38-27b-local-api-substitution (1.0x)

Evidence (6) — ⭐ canonical anchor

source	object	author	score	comments
🟧 hn	South Korea says AI agents appear to have been used to hack the country's banks	thoughtpeddler	100	32
🟧 echo.youtube ⭐	Official KTV broadcast of the 43rd State Council (Cabinet) meeting chaired by President Lee Jae-myung, 2026-10-06 10:00, Blue House main hal	President Lee Jae-myung (remarks published by KTV 이매진, the Korean government's official policy broadcast channel)	—	—
🟠 reddit	Last week some of South Korea's biggest banks were hit by a cyberattack. We now know the entire hack may have been done by a single person. He used a combined stack of an open-source AI penetration tool named ARTEX, DeepSeek v4.1-Flash, GLM-5.3, Grok 4.6, and Claude Code (CrowdStrike) LocalLLaMA	Nunki08	921	185
🟧 hn	Chinese developer makes ARTEX AI agent closed-source after Korean bank hack	01-_-	1	0
🟠 reddit	Humans weaponizing AI singularity	phronesis77	4	12
🟧 hn	Artex AI, Claude agents used in cyberattacks on South Korean banks	Brajeshwar	1	0

Interpretation history

2026-10-11T14:21:06Z
BleepingComputer report adds independent corroboration of the ARTEX/Claude agent stack, but official task-force findings on agent role and state attribution remain pending; measured heat shows story cooling (0.17 pts/hr, 25th percentile, 6 days old) while the agentic-security topic band stays hot with 142 open episodes.
2026-10-11T13:39:44Z
evidence attached: hn.story.50043132 — BleepingComputer report names Artex AI and Claude agents in the South Korean bank intrusions, providing independent corroboration of the open case's hypothesis.
2026-10-10T06:38:07Z
Case remains corroborated with multiple independent sources (presidential statement, CrowdStrike technical analysis, Reuters on ARTEX closure), but measured heat shows cooling momentum (1.17 pts/hr, 53rd percentile, 4.7 days old) and no new material facts — official task-force findings on agent role and state attribution still pending. New evidence is community discussion of existing NYT reporting, not new facts.
2026-10-10T06:35:41Z
evidence attached: reddit.post.1x269hr — References the same NYT article on South Korean bank hacks attributed to AI agents, adding independent community discussion to the corroborated case.
2026-10-10T00:31:38Z
CrowdStrike's independent technical confirmation of the ARTEX-led agent stack and the Reuters-documented closure of ARTEX by its Chinese developer move this from presidential claim to corroborated intrusion with immediate real-world consequences; official task-force findings on agent role and state attribution remain pending. Measured heat shows accelerating momentum (75th percentile, multi-platform) and the agentic-security topic band is hot with 132 open episodes.
2026-10-09T19:58:40Z
evidence attached: hn.story.50024429 — Reuters report of a Chinese developer closing their AI agent after the Korean bank hack is a direct consequence of the episode tracked in that case.
2026-10-08T11:47:35Z
CrowdStrike's independent technical confirmation of the ARTEX-led agent stack moves this from presidential claim to corroborated intrusion; official task-force findings remain pending on both agent role and state attribution.
2026-10-08T10:42:27Z
evidence attached: reddit.post.1x0n4pt — CrowdStrike report confirms AI agent stack (ARTEX, DeepSeek, GLM, Grok, Claude Code) used in South Korean bank intrusions, directly corroborating the seed case.
2026-10-07T04:07:15Z
origin walked (opencode/cheap-glm, conf 0.87): anchor hn.story.49985861 -> echo.youtube.49c6d49a06 by President Lee Jae-myung (remarks published by KTV 이매진, the Korean government's official policy broadcast channel)
2026-10-07T03:47:07Z
grounded: novel/medium — No position of Scott's is challenged or newly adopted by anyone here, but the case lands squarely on a canon cluster: attributing agent-executed intrusions from
2026-10-07T03:35:48Z
case created — Head-of-government attribution that AI agents executed bank intrusions is a distinct, consequential agentic-security episode whose official-investigation outcome is directly resolvable.

Decision trace

10-12 01:21repriceBleepingComputer report adds independent corroboration of the ARTEX/Claude agent stack, but official task-force findings on agent role and state attribution remain pending; measured heat shows story c
10-12 00:43attention_routeThe editor compared this story and chose to keep watching.
10-12 00:39attention_candidateattach
10-12 00:39attachBleepingComputer report names Artex AI and Claude agents in the South Korean bank intrusions, providing independent corroboration of the open case's hypothesis.
10-12 00:38propose_attachBleepingComputer report names Artex AI and Claude agents in the South Korean bank intrusions, providing independent corroboration of the open case's hypothesis.
10-10 18:54sensor_dirtyvelocity_spike
10-10 17:41attention_routeThe editor compared this story and chose to keep watching.
10-10 17:38repriceCase remains corroborated with multiple independent sources (presidential statement, CrowdStrike technical analysis, Reuters on ARTEX closure), but measured heat shows cooling momentum (1.17 pts/hr, 5
10-10 17:35attention_candidateattach
10-10 17:35attachReferences the same NYT article on South Korean bank hacks attributed to AI agents, adding independent community discussion to the corroborated case.
10-10 17:34propose_attachReferences the same NYT article on South Korean bank hacks attributed to AI agents, adding independent community discussion to the corroborated case.
10-10 12:05attention_communicatedPresident Lee Jae-myung stated AI use emerged in intrusions across 7+ financial institutions. CrowdStrike independently identified an agent stack including open-source pentest tool ARTEX (since closed
10-10 12:05attention_routeFirst independent technical confirmation (CrowdStrike) of an AI-agent stack in a national-scale financial intrusion. The ARTEX closure shows immediate chilling effect on dual-use tooling. Scott's
10-10 11:37attention_routeFirst independent technical confirmation (CrowdStrike) of an AI-agent stack in a national-scale financial intrusion. The ARTEX closure shows immediate chilling effect on dual-use tooling. Scott's
10-10 11:31attention_candidatematerial_reprice
10-10 11:31repriceCrowdStrike's independent technical confirmation of the ARTEX-led agent stack and the Reuters-documented closure of ARTEX by its Chinese developer move this from presidential claim to corroborate
10-10 07:07attention_routeThe editor compared this story and chose to keep watching.
10-10 06:58attention_candidateattach
10-10 06:58attachReuters report of a Chinese developer closing their AI agent after the Korean bank hack is a direct consequence of the episode tracked in that case.
10-10 06:57propose_attachReuters report of a Chinese developer closing their AI agent after the Korean bank hack is a direct consequence of the episode tracked in that case.
10-10 06:37sensor_dirtycomment_update
10-10 00:36sensor_dirtyvelocity_spike
10-09 15:39sensor_dirtyvelocity_spike
10-09 10:06attention_routeThe editor compared this story and chose to keep watching.
10-09 09:34sensor_dirtyvelocity_spike
10-09 02:41sensor_dirtycomment_update
10-08 23:33sensor_dirtyvelocity_spike
10-08 22:53attention_routeMaterial escalation from watch: CrowdStrike corroboration moves this from head-of-government claim to independently verified toolchain usage. Investigation findings will provide a real-world instance
10-08 22:47attention_candidatematerial_reprice
10-08 22:47repriceCrowdStrike's independent technical confirmation of the ARTEX-led agent stack moves this from presidential claim to corroborated intrusion; official task-force findings remain pending on both age
10-08 21:47attention_routeThe editor compared this story and chose to keep watching.
10-08 21:42attention_candidateattach
10-08 21:42attachCrowdStrike report confirms AI agent stack (ARTEX, DeepSeek, GLM, Grok, Claude Code) used in South Korean bank intrusions, directly corroborating the seed case.
10-08 21:38propose_attachCrowdStrike report confirms AI agent stack (ARTEX, DeepSeek, GLM, Grok, Claude Code) used in South Korean bank intrusions, directly corroborating the seed case.
10-08 00:59attention_routeThe editor compared this story and chose to keep watching.
10-08 00:21sensor_dirtycomment_update
10-07 19:21sensor_dirtycomment_update
10-07 17:22sensor_dirtyvelocity_spike
10-07 15:07promote_anchororigin walk conf 0.87
10-07 14:47groundNo position of Scott's is challenged or newly adopted by anyone here, but the case lands squarely on a canon cluster: attributing agent-executed intrusions from thin traces (ARTEX AI's conso