[Security Agency: Hackers Use LLM Combined with AI Penetration Tools to Attack South Korean Financial Institutions, Data of Approximately 68,000 People Leaked] Odaily Planet Daily News – Security agency CrowdStrike has released an intelligence report stating that an unidentified hacker combined large language models (LLM) with the domestic open-source AI penetration testing tool ARTEX to launch targeted cyberattacks on multiple South Korean financial institutions and steal data between late September and early October. Analysis of the hacker's exposed open directory revealed a dual-server architecture centered around a Hong Kong, China IP address. The attack process was orchestrated using models such as Claude Code, GLM-5.3, Grok 4.6, and DeepSeek v4.1-flash accessed via API proxies. The hacker was also found to have asked Claude how to monetize leaked South Korean data in Telegram groups. According to South Korean media estimates, at least seven financial institutions were attacked, including KB Kookmin Bank, Shinhan Bank, and Hana Bank. Personal data of approximately 68,000 individuals was leaked, involving sensitive information such as annual income and loan limits.