Research
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
First reported · Discovered crowdstrike.com
Page published
Earliest dated coverage: 20 Oct 2026 · First observed: 22 Oct 2026 · Latest dated coverage: 20 Oct 2026
Coverage timeline
Single-source research — one report is available.
Why it matters
Flare’s measurements and the supporting ARTEX investigation connect criminal interest in less-restricted models with operational use of AI agents for intrusion and data theft.
Flare reports a 745% increase in cybercrime-channel mentions of model abliteration from January to October 2026, based on analysis spanning more than 100,000 Telegram channels and 100 dark-web forums. The study identifies a small model-access marketplace dominated by apparent API resale rather than verified weight-level modification, and cites CrowdStrike’s investigation of ARTEX-assisted intrusions and data theft at South Korean financial organizations.