// ClaudeHIGH
An unidentified financially motivated threat actor used Claude Code and other agentic AI tools as part of a campaign targeting South Korean financial institutions from late September to early October 2026. Attackers leveraged Claude Code with Chinese-language instruction files for penetration testing and reconnaissance, compromising at least two major banks (Shinhan and KB Kookmin) and affecting tens of thousands of customers. Recovered session logs and exposed operational infrastructure documented the attacker's workflows and Claude Code usage patterns.
- Financially Motivated Hacker Uses Agentic AI to Breach Multiple (opens in a new tab)
- Weekly Musings Top 10 AI Security Wrapup: Issue 57: October 2 to(opens in a new tab)
// Get alerts for Claude