South Korean police arrest former pentester who used ARTEX AI to steal 8.2 million records
Seoul police identified seven suspects behind a cybercrime operation that breached more than 90 organizations in South Korea, including schools, hospitals, large corporations and even golf courses, led by a self-taught 32-year-old hacker with a background in penetration testing at a cybersecurity firm. The suspect used ARTEX, the same autonomous AI penetration-testing framework previously linked to a Chinese-speaking group's attacks on South Korean banks, switching to it from conventional tools in August 2026 to scale up his attacks. In 38 cases he demanded ransoms of around $270,000 in exchange for not leaking the stolen data, and authorities estimate he stole 8.2 million records in total since September 2025. Police called it the country's first arrest for large-scale cybercrime and data theft that exploited generative AI, noting the technology has lowered the barrier to entry so far that even a lone individual, without an organized group behind him, can now cause damage at a scale that once required a skilled team of attackers. For a business, the case shows that the risk from AI penetration-testing tools is no longer confined to state-backed groups, since the same tool can end up in the hands of a single criminal.
Sources
This summary was written automatically with AI from the public sources listed above and checked by an independent AI reviewer before publication. For full details, read the original source.