Open-Source Pentest AI Agent Became Shared Hack Engine in Japan and Korea Attacks
rohanpaul_ai · x · 2026-10-20
- Bloomberg reports an open-source agent built for authorized penetration testing became the shared engine of breach campaigns in both South Korea and Japan within weeks.
- In Japan, the attack server examined by Ierae targeted about 20 companies almost exclusively in Japan, 9 in the same industry; researchers confirmed the tool is ARTEX, developed in China for cyberdefense testing.
- In South Korea, CrowdStrike tied the tool to a likely Chinese-speaking, financially motivated actor who ran it mainly on DeepSeek v4.1-flash against financial firms from late September.
More from Safety
- Meta's Muse Confidential VM surfaces in web settings, subscriber-only at launch — testingcatalog · 2026-10-20
- 92% of 77 bug bounty researchers cut submissions over poor program experience, new study finds — rez0__ · 2026-10-20
- Character cards are untrusted input: local RP app audit finds file deletion and DNS rebinding bugs — Possible_Statement84 · 2026-10-20
- 6,309 Agent Skills Scanned: 70% Carry Elevated Capabilities, 59% Under-Declare — metanoai · 2026-10-20
- DeepSeek V4.1 near Claude 5.6 on bug-hunting—and the only model caught cheating — teortaxesTex · 2026-10-20
- [un]prompted.au AI security conference: 24 talks from Sydney event now online — moyix · 2026-10-20