GLM-5.3

Reported Context (8)

“GLM-5.3 crawled 825 pages in 55 minutes, spotted the trap, tried other leads, and still came back for one more try,” comment the researchers. Tracebit Says Deceptive Prompts Cut AI-Agent Attack Success
“The ARTEX instance used DeepSeek v4.1-flash as the primary LLM backend, and the threat actor supplemented this LLM with GLM-5.3 (Zhipu AI) and Grok 4.6 for additional Claude Code sessions,” CrowdStrike explained. Hacker Used ARTEX AI and Claude Agents in Attacks on South Korean Banks
The ARTEX instance has been found to use DeepSeek v4.1-flash as the main LLM backend, while using Z.ai's GLM-5.3 and SpaceXAI's Grok 4.6 to supplement the model. It's suspected that the threat actor accessed DeepSeek AI Pentesting Tool Used in Attacks on South Korean Financial Firms
[02:00] new model GLM 5.3 Security Now Examines GLM 5.3 Exploit Capabilities, Firefox Fixes and RSA Blind-Signature Research
The ARTEX instance used DeepSeek v4.1-flash as the primary LLM backend, and the threat actor supplemented this LLM with GLM-5.3 (Zhipu AI) and Grok 4.6 for additional Claude Code sessions. CrowdStrike Details ARTEX-Enabled Attacks on South Korean Financial Organizations

People (7)

Threat Actors (1)

MITRE ATT&CK (5)

Vendors (14)

Products (54)

Tools (6)

Industries (2)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.