一名入侵韩国银行的攻击者曾向 Claude 询问被盗韩国数据的销路。官方认为，一款中国开源智能体参与了对至少 7 家韩国金融机构的入侵。攻击者自己的 Claude Code 会话历史、Claude 记忆文件和 ARTEX 配置存放在开放目录中，直接展示了这场针对韩国金融业的 AI 辅助入侵行动如何运作。
The attacker who breached South Korean banks asked Claude where stolen Korean data sells.
And Officials believe an open-source Chinese agent helped breach at least 7 South Korean financial institutions.
The attacker’s own Claude Code session histories, Claude memory files and ARTEX configurations sat in open directories, giving a direct view of how an AI-assisted intrusion campaign against South Korean finance was run.
ARTEX, a recently released Chinese open-source agentic pentesting tool, ran on DeepSeek v4.1-flash, likely reached through an API reseller, from a host that probably carried out the Korean attacks.
来源：Rohan Paul · x.com