South Korean police arrest seven over AI-driven breach of 90+ organizations
Seoul Metropolitan Police say a seven-member gang, led by a former penetration tester, breached more than 90 South Korean organizations starting in September 2025 and stole 8.2 million records. The group used the ARTEX AI pentesting framework in most attacks and demanded ransom payments of 360 million won ($270,000) in 38 cases to avoid leaking stolen data. The leader was arrested on October 15 and referred to prosecutors on October 23; the other six suspects remain under investigation but not detained.
GoKawiil's interpretation of the reporting above, not reported fact.
Police told local media that AI tools have lowered the technical barrier for cybercrime, enabling attacks that previously required skilled operators, which could point to a broader rise in AI-assisted hacking campaigns. The same ARTEX AI framework was reportedly linked to earlier bank intrusions attributed to a Chinese-speaking actor, suggesting the tool may be circulating among multiple criminal groups. This case may prompt South Korean authorities to scrutinize how commercial or leaked AI security tools are being repurposed for extortion.
- Seven suspects identified in breaches affecting over 90 South Korean organizations since September 2025.
- Attackers used the ARTEX AI pentesting framework and demanded $270,000 ransoms in 38 cases.
- Police say AI tools are lowering the skill barrier needed to carry out large-scale cyberattacks.
Source: bleepingcomputer.com, 2026-10-26
Published there as: “Former pentester used ARTEX AI to steal 8.2 million data records”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.