Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions
Zscaler, Wednesday, October 14th, 2026
ThreatLabz reports a campaign abusing ARTEX, an open-source LLM-driven pentesting framework, against South Korean financial firms.
Zscaler ThreatLabz analyzed an exploitation campaign in which a threat actor abused ARTEX, an open-source agentic penetration testing framework developed in China that uses large language models to automate reconnaissance and exploitation.
First observed in late September 2026, the campaign affected multiple South Korean financial firms.
The post provides threat details, behavioral indicators, recommendations and Zscaler coverage.