Tag: finance
-
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
Tags: ai, attack, crowdstrike, cybersecurity, data, finance, intelligence, penetration-testing, theft, threat, toolCybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool named ARTEX to carry out the attacks.The activity, per CrowdStrike Intelligence, was active from late September to early October 2026, and resulted in data exfiltration.”In this activity, the threat actor leveraged…
-
Hackers target two South Korean megachurches, potentially exposing congregant data
Two of South Korea’s largest Protestant churches are investigating cyberattacks that may have exposed sensitive information about hundreds of thousands of members, including personal details, financial records and internal documents. First seen on therecord.media Jump to article: therecord.media/south-korea-hackers-megachurches
-
Asos says customers’ names, contact details and search histories hacked
Experts say breadth of data accessed could help attackers devise “highly convincing” phishing scams<ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/08/oil-prices-rise-shipping-attacks-rate-rise-uk-housing-market-bank-england-latest-live-updates”>Business live live updates</li></ul>Asos hackers gained access to millions of customers’ recent search histories as well as names, addresses and phone numbers, the online fashion retailer has revealed.Terms typed in by customers such as “glamorous wide fit” and “Asos petite” were…
-
Uranium crypto exchange hacker convicted for stealing $53 million
A Maryland man was found guilty of stealing more than $53 million after hacking the decentralized crypto exchange Uranium Finance twice in April 2021. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uranium-crypto-exchange-hacker-found-guilty-of-53-million-theft/
-
Asos says hacker accessed customers’ names, contact details and search histories
Millions of users’ personal data is said to have been compromised but not card details or passwords <ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/08/oil-prices-rise-shipping-attacks-rate-rise-uk-housing-market-bank-england-latest-live-updates”>Business live live updates</li></ul>Asos hackers gained access to millions of customers’ recent search histories as well as names, addresses and phone numbers, the online fashion retailer has revealed.Terms typed in by customers such as “glamorous wide fit”…
-
Asos customers’ names, search histories and contact details accessed in hack, says retailer
Hackers gained access to millions of users’ personal data, but not card details or passwords, Asos says<ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/08/oil-prices-rise-shipping-attacks-rate-rise-uk-housing-market-bank-england-latest-live-updates”>Business live live updates</li></ul>Asos hackers gained access to millions of customers’ recent search histories as well as names, addresses and phone numbers, the online fashion retailer has revealed.Terms typed in by customers such as “glamorous wide fit” and…
-
Chinese Hacker Deployed AI in Campaign Against South Korean Banks
CrowdStrike revealed that a Chinese-speaking hacker deployed agentic pentesting tool ARTEX and Claude to help breach data from South Korean financial firms First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chinese-hacker-ai-korean-banks/
-
Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets
Tags: ai, breach, china, cyber, data-breach, finance, hacker, infrastructure, open-source, penetration-testing, toolA financially motivated campaign that used agentic AI tools to breach South Korean financial organizations and exfiltrate data. Active from late September to early October 2026, the operation combined ARTEX, an open-source penetration testing platform developed in China, with multiple large language models. Researchers recovered exposed operational files that documented the attacker’s infrastructure, prompts, and…
-
Asos says customer data accessed by hacker posing as trusted contact
Customers are told payment details and passwords were not compromised when employee account was breached<ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/08/oil-prices-rise-shipping-attacks-rate-rise-uk-housing-market-bank-england-latest-live-updates”>Business live live updates</li></ul>Hackers gained access to Asos customer names and contact details by impersonating a “trusted contact” to gain access to one of its employee’s accounts, the retailer has said.Thousands of users of the online fashion seller’s app <a…
-
The Man Behind a West Bank Telegram Channel Trying to Keep Palestinian Drivers Safe
With no accurate Big Tech mapping app to help him, Anas Hattab launched a Telegram group to get himself home at night. Now nearly 350,000 Palestinians rely on it to navigate the occupied West Bank. First seen on wired.com Jump to article: www.wired.com/story/the-man-behind-a-west-bank-telegram-channel-trying-to-keep-palestinian-drivers-safe/
-
South Korean President Orders Probe After Financial Data Breaches
South Korea’s president ordered a financial-sector probe after breaches hit major banks and lenders, exposing customer data and raising questions about AI-assisted attacks. The post South Korean President Orders Probe After Financial Data Breaches appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-south-korean-president-financial-data-breach-probe-apac/
-
South Korea Suspects AI Tool Helped Steal Bank Customer Data
Attack Servers Show Signs Open-Source Penetration Testing Tool Artex Employed. Police in South Korea probing data breaches at multiple banks have found signs on attack servers that the threat actor used a free, open-source and semi-automated penetration testing tool called Artex AI to help steal data pertaining to more than 60,000 individuals. First seen on…
-
EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data
Ernst & Young (EY) has warned that a data breach exposed personal and financial information belonging to clients of Goldman Sachs’ wealth management division and Man Group. The incident involved a platform supporting EY’s tax services, not the financial firms’ own networks, according to client notifications reported by the Financial Times. The latest disclosures expand…
-
Hackers Use ERP Web Shell and IDOR Flaws to Breach Major South Korean Churches
Attackers breached two of South Korea’s largest churches through distinct intrusion chains, combining an ERP web shell, privileged database access, leaked credentials, and broken authorization controls. Oasis Security’s analysis of attacker-server files documents extensive collection of congregant, employee, financial, and administrative information across both organizations. Its findings describe recovered attacker artifacts, rather than a complete…
-
Asos warns customer data may be compromised after ‘unauthorised’ app access
Shares in fashion company fall 11% after its app systems are accessed by ‘unidentified third party'<ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/06/euro-france-central-bank-interest-rates-bonds-latest-live-updates”>Business live latest updates</li></ul>Asos is investigating unauthorised access to its app system after shoppers received a notification claiming hackers had “fully compromised” its data.The online fashion retailer said basic personal information including name and contact details might have been…
-
South Korean officials believe AI agents were used to hack several banks
The personal data of at least 68,000 people was reportedly exposed in breaches of at least seven financial institutions, with officials saying they believe a Chinese cybersecurity tool was used to hack the banks’ systems. First seen on therecord.media Jump to article: therecord.media/south-korean-bank-hacks-ai-agents
-
Asos customers receive ‘hack’ message threatening to leak personal data
Shares in fashion company fall 11% after its app systems are accessed by ‘unidentified third party'<ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/06/euro-france-central-bank-interest-rates-bonds-latest-live-updates”>Business live latest updates</li></ul>Asos is investigating unauthorised access to its app system after shoppers received a notification claiming hackers had “fully compromised” its data.The online fashion retailer said basic personal information including name and contact details might have been…
-
Asos customers receive ‘hack’ notification threatening to leak data
Push message claims fashion company’s data has been ‘fully compromised’, but website and app remain online<ul><li><a href=”https://www.theguardian.com/business/live/2026/oct/06/euro-france-central-bank-interest-rates-bonds-latest-live-updates”>Business live latest updates</li></ul>Asos is investigating after users of its mobile app received a notification claiming hackers had “fully compromised” the online fashion retailer’s data.The value of Asos’s shares on the London Stock Exchange dived more than 14% after…
-
U.S. Bank CISO says the security role keeps growing and no one can own all of it
In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/06/ann-barron-dicamillo-collective-cyber-defense/
-
South Korea probes bank breaches amid suspected AI-powered attacks
South Korea’s Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial institutions in the country. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/south-korea-probes-bank-breaches-amid-suspected-ai-powered-attacks/
-
South Korea probes bank breaches amid suspected AI-powered attacks
South Korea’s Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial institutions in the country. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/south-korea-probes-bank-breaches-amid-suspected-ai-powered-attacks/
-
South Korea Orders Investigation Into AI-Powered Cyberattacks on Major Banks
South Korean President Lee Jae Myung has ordered a comprehensive investigation into a series of data breaches impacting major banks and other financial institutions. Concerns have been raised that attackers may have utilized AI-enabled offensive security tools. These incidents have prompted emergency regulatory action and a sector-wide effort to strengthen defenses against increasingly automated intrusions.…
-
‘They call every week’: the phishing attacks targeting past victims
Scammers reuse personal details harvested from fake Esta websites and texts and calls can keep arriving for monthsWhen the British actor Lisa Riley was preparing to travel to the US last year, she applied online for an Esta so she would not need a visa. After finding the site through a Google search she filled…
-
FTC Probes OpenAI, Anthropic as AI Agent Safety Risks Draw Scrutiny
The FTC is investigating OpenAI, Anthropic and other AI firms over potential consumer harms, safety claims and risks tied to increasingly autonomous AI systems. The post FTC Probes OpenAI, Anthropic as AI Agent Safety Risks Draw Scrutiny appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ftc-openai-anthropic-ai-consumer-harms/
-
Milk Dragon Phishing Kit Uses Facebook and TikTok Discounts to Steal Cards and Bypass MFA
A phishing-as-a-service operation dubbed Milk Dragon, also known as NaiLong, is abusing discount-themed Facebook and TikTok posts to steal payment-card data and intercept multi-factor authentication (MFA) challenges. Group-IB identified 258 phishing pages linked to the kit since October 2025, with victims across 66 countries. Rather than relying on classic delivery-failure notices, bank alerts, or account-lockout…
-
Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools
Google has announced a new security measure that limits access to Android’s accessibility services to verified applications classified as Accessibility Tools when Advanced Protection is enabled.With malicious Android applications abusing the API serving as the main conduit for malware and financial fraud, the tech giant said the move would block a major attack pathway. Advanced…
-
FTC Investigates OpenAI and Anthropic Over Consumer Risks From Advanced AI Models
The U.S. Federal Trade Commission (FTC) has initiated a broad investigation into OpenAI, Anthropic, and other leading artificial intelligence developers to examine potential consumer harm arising from advanced AI systems. This inquiry will assess whether the companies’ development, deployment, safety claims, and management of agentic AI risks could violate the FTC Act’s prohibition on unfair…
-
Tren de Aragua ATM Jackpotting Network Linked to $40.7 Million in U.S. Losses
The U.S. Treasury Department has sanctioned a Tren de Aragua (TdA)-linked financial network accused of using malware-driven ATM jackpotting attacks to steal an estimated $40.73 million from U.S. financial institutions. The September 30 action adds eight individuals, two Mexico-based companies, and seven TRON cryptocurrency addresses to the Office of Foreign Assets Control’s (OFAC) Specially Designated…
-
Experience What It’s Like to Travel in the Occupied West Bank
Tags: financeTraverse barriers and checkpoints in the occupied West Bank”, your choices reflect the reality of nearly 3.5 million Palestinians who live there. First seen on wired.com Jump to article: www.wired.com/story/experience-what-its-like-to-travel-in-the-occupied-west-bank/
-
Queensland Cybersecurity Department Loses $809,000 in Cyberattack
The Queensland government department in charge of the state’s cybersecurity efforts has disclosed a loss of roughly $800,000 from a cyberattack during the last financial year. Details of the CDSB cyberattack, which involved a third-party messaging service being “misused” for financial gain, appear in the QLD cybersecurity department’s latest annual report, released on Friday. First…