The Daily PulseTechnology
Chinese developer locks source code of ARTEX AI agent after South Korean bank cyberattacks
Reported by Aditya Chauhan (Staff Writer) · Livemint - Technology ·
Reported by one source so far
Photo: Wikimedia CommonsDeveloper Action
A Chinese developer has changed the ARTEX artificial intelligence agent into a closed-source project. This step follows reports from cybersecurity firms that the tool was used in recent cyberattacks against South Korean banks. The developer posted on the code-hosting platform GitHub on Thursday that the project will no longer receive updates, new public versions, or maintenance support due to the misuse of the tool.
Official Stances
The developer uses the GitHub handle "Autumn-27" and stated that the original goal of ARTEX was to help companies and groups test security risks and improve safety. Without directly mentioning the South Korean bank attacks, the developer said they oppose any illegal use of the software and hold no responsibility for acts that break laws. Checks confirmed that the ARTEX GitHub page has been taken down. Meanwhile, US cybersecurity firm Crowdstrike reported on Wednesday that the suspect behind the attacks aimed to steal personal data from customers. Crowdstrike identified the suspect as a 26-year-old based in China who used the ARTEX AI agent along with Anthropic's Claude Code.
Investigation and Reactions
At least nine South Korean banks have reported or been named by local media as targets of cyberattacks since late September. This wave of attacks led the police to start an investigation this week, while President Lee Jae Myung called for strong action. Chinese foreign ministry spokesperson Mao Ning stated during a regular press briefing on Thursday that the ministry was not familiar with the case, and added that China consistently opposes and fights hacking activities.
Context
Cybersecurity incidents involving the misuse of open-source developer tools often prompt creators to restrict public access to prevent further harm. International cooperation and investigations into cross-border cyberattacks typically involve coordination between private security firms, national law enforcement agencies, and government officials.
ExplainerWhy this matters
What Happened
A Chinese developer restricted public access to an AI agent named ARTEX after security researchers linked the software to a series of cyberattacks targeting South Korean banks.
Why It Matters
This case highlights the growing security concerns surrounding the misuse of open-source artificial intelligence tools and developer software in state-sponsored or targeted cybercrime operations. When powerful coding agents designed for security testing fall into the wrong hands, they can be leveraged to streamline attacks against critical financial infrastructure, raising urgent questions about developer accountability and software governance.
What Happens Next
Law enforcement agencies in South Korea will continue their active probe into the bank breaches, while international cybersecurity analysts monitor how developers secure code-sharing platforms against malicious exploitation.
