Former pentester used ARTEX AI to steal 8.2 million data records

[XploitLK-Bot]

South Korean police have identified seven suspects tied to a cybercrime operation that compromised more than 90 organizations across the country. According to investigators, the group relied on the ARTEX AI pentesting framework to carry out most of the attacks, a detail that stands out given the tool's origins in legitimate security testing.

The operation reportedly led to the theft of 8.2 million data records, and the case has drawn attention because at least one of the accused is a former pentester — someone with hands-on experience in offensive security techniques. That background likely made it easier to adapt professional-grade tooling like ARTEX AI for criminal purposes rather than authorized assessments.

Key points from the report:

• Police in South Korea identified seven suspects in connection with the campaign
• More than 90 organizations were breached
• The ARTEX AI pentesting framework was used in the majority of the attacks
• A former pentester is among those accused
• Roughly 8.2 million records were stolen

The case underscores a familiar concern in the security community: tools built for authorized penetration testing can be repurposed with little friction when they fall into the wrong hands. It also highlights how AI-assisted frameworks are lowering the effort required to scale attacks across many targets.

Source: Unknown

Does your organization have controls in place to detect abuse of legitimate pentesting tooling, and how are you handling that risk?