ARTEX developer ends releases after reported attacks on Korean financial firms

ARTEX's developer says the AI penetration-testing project will become closed source and receive no further releases or maintenance after reported misuse against South Korean financial organizations. CrowdStrike Intelligence says the campaign ran from late September to early October 2026 and resulted in data theft. Researchers discovered exposed directories containing Claude Code session histories and ARTEX configuration files. The campaign used ARTEX alongside language models, but has not been attributed to a known group. Developer Autumn-27 says the attacks were unrelated to them and violated the tool's intended use for authorized security testing.