Signs of ARTEX AI, a Chinese-language autonomous penetration testing system, were detected in the HTML title of servers believed to have supported credential-stuffing and API attacks targeting multiple South Korean sites. The infrastructure is also believed to have been used in the attack that exposed personal information belonging to about 25,000 Shinhan Bank customers after an unauthorized outsider bypassed identity-verification procedures in the bank's loan broker service. The string, "ARTEX — 自主渗透测试控制台," means "autonomous penetration testing console," but it has not been confirmed whether ARTEX AI was used in the Shinhan breach. The open-source, large language model-based system combines multi-agent technology to automate target reconnaissance, vulnerability scanning, attack-path planning, security-tool execution and vulnerability verification. Genians Security Center head Moon Jong-hyun said threat analysts reasonably suspect that AI-based attack automation tools may have been involved. ARTEX AI was introduced this year as the winning project in the Agent+ offensive and defensive capability challenge led by China's Baidu Security Response Center. Security experts say the system can support authorized testing but could also increase the automation and efficiency of real-world cyberattacks if abused.