CrowdStrike's post headline reads "Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance"; wire coverage of it names a 26-year-old in Guangdong. I saw the vendor page only partly, so it may name him too. Check the primary source, not the secondary.
Quoted from a source: “The threat actor used multiple proxy IP addresses during the ARTEX-related activity.”
CrowdStrike's report itself warns it could not definitively associate the exposed personal details with the attacker. The Hindu headline's “China-based suspect” should therefore remain qualified; CrowdStrike describes an unknown actor and circumstantial linkage, not a confirmed identity.