ARTEX Goes Closed-Source After Bank Hacks

ARTEX’s shutdown highlights how quickly autonomous security tooling can move from legitimate red-team research to real-world abuse.

• –CrowdStrike linked the campaign to ARTEX, Claude Code, and multiple external LLMs
• –The attribution remains unconfirmed by South Korean authorities and affected banks
• –Closing the repository cannot remove existing clones, forks, or deployed copies
• –Security teams should treat agentic pentesting tools as high-risk infrastructure requiring strict authorization, isolation, and logging