CrowdStrike finds exposed logs of SI tools believed to have been used to hack South Korean banks
Prepared by Sintelligent with the help of SI. Published in SI: . Updated: .
SI speeds up attackers too, so the cost of a defensive mistake rises, and defense has to accelerate along with it.
According to The Register, CrowdStrike found session logs and SI memory files on servers in Hong Kong: they show traces of Claude Code and the Chinese pentest tool ARTEX, plus a résumé that may point to the attacker. Five banks are named among the victims, including Shinhan (25,000 customers), KB Kookmin (119) and Hana (89). CrowdStrike links the author to a Chinese speaker from Guangdong province; this is the company's assessment, not an established fact.
Sources 1