TAG-217 used AI tools (ARTEX, Claude Code, DeepSeek, Grok) in preparations linked to South Korean bank breaches affecting 68,000+
Recorded Future's Insikt Group tracks the actor behind the October 2026 intrusions into South Korean financial institutions as TAG-217, a suspected Chinese-speaking operator. It is not confirmed as state-backed (gbhackers.com). South Korea's Financial Services Commission (FSC) disclosed the attacks in early October (recordedfuture.com). P…