As cited
Copy frozen at (site build).
threat intel
Inside a Global AI-Assisted Hacking Campaign
In October 2026, Zscaler ThreatLabz discovered a sophisticated global campaign using the ARTEX penetration testing framework combined with artificial intelligence (AI) coding assistants, custom automation scripts, and multiple AI models including DeepSeek, GLM, and Grok to target financial institutions, payment platforms, cryptocurrency exchanges, and other services across dozens of countries. The threat actor, identified as Chinese-speaking based on language preferences and infrastructure artifacts, configured synchronization scripts and persistent project management systems to maintain investigation context across AI sessions and divided tasks among specialized AI agents with peer-review workflows. Prompt histories revealed financially motivated objectives focused on extracting personal and transaction data for monetization, with explicit targeting of payment credentials, customer records, and user identifiable information across retail, education, investment, SMS, and social platforms.
Why it matters: Financial institutions, payment processors, cryptocurrency platforms, and any organization holding customer personal or transaction data are at direct risk from this geographically opportunistic campaign, which demonstrates how threat actors can operationalize AI assistance at scale to overcome detection and amplify attack surface discovery across distributed targets.
- Source published
- First seen by Cybersecurity Tracker