The Chinese AI penetration testing tool "ARTEX," known to have been utilized in recent sequential hacking attacks targeting South Korea's financial sector, has decided to halt public development following controversies over its misuse.
However, as programs already distributed cannot be recalled, the development halt alone is unlikely to block cyberattacks utilizing ARTEX.
Foreign media outlets, including Reuters, reported that the developer of ARTEX, using the account name "Autumn-27" on the developer platform GitHub, posted a message stating that ARTEX had been misused.
Autumn-27 stated, "As cases of misuse of the tool have occurred, ARTEX will no longer be updated and will be converted to a private source."
The developer added, "Additional versions will not be released to the public, and maintenance support will not be provided." While ARTEX's side claimed that using the tool for cyberattacks runs counter to the developer's intent, it did not directly mention the hacking incidents that occurred in South Korea.
ARTEX maintains the stance that it is not responsible for actions that violate laws and regulations using the tool.
It has been confirmed that ARTEX's GitHub page has currently been deleted.
Released on GitHub this year, ARTEX is an autonomous penetration testing program designed to connect Large Language Models (LLMs) so that AI agents can analyze targets, plan intrusion paths, and execute security tools.
U.S. cybersecurity firm CrowdStrike analyzed that the suspected perpetrators of recent cyberattacks targeting South Korean banks used the ARTEX AI agent.
(Reported by Kim Taewon | Video by Na Hong-hee | Graphics by Lee Jung-joo | Produced by SBS Digital News)
※
Copying, redistribution, and unauthorized use in AI training are strictly prohibited.