❗️Hacker may have exposed himself by asking AI to write his résumé

A hacker suspected of targeting South Korean banks may have accidentally revealed his identity after asking Claude Code to write a résumé about his own hacking activities.

CrowdStrike traced the attacks to infrastructure running an AI hacking tool called ARTEX. Investigators later found publicly exposed folders containing the attacker’s saved Claude Code conversations.

In one chat, he asked Claude to create a cybersecurity résumé describing his ARTEX work and provided personal details including a phone number, Telegram handle, claimed age of 26, university and location in China. The same Telegram handle appeared in other hacking-related conversations.

He had also asked Claude where stolen Korean data is typically sold.

His identity has not been independently confirmed but asking an AI to turn your own cybercrime history into a résumé is certainly an unusual way to leave a trail.

@aipost 🏴