Citi lifted CrowdStrike to $295 on the vendor's own AI-attack reporting; October 31 is the test
Citi and BNP Paribas lifted their CrowdStrike views this week on the company's own reporting of AI-driven attacks on South Korean banks. What settles the story is net new recurring revenue in the quarter ending October 31, 2026; the chief executive's scheduled share sale is noise.
Richard Tang · 3 min read
The best evidence that AI agents now carry out real attacks comes from the company paid to stop them, and this month Wall Street priced that evidence as fact 12. CrowdStrike's−7.47% — CrowdStrike, down 7.47 percent today account of the attacks on South Korean banks is its own work product 3. In the same week, chief executive George Kurtz sold $5.2 million of stock under a January trading plan 4, and the only independent test of the story arrives with the quarter closing October 31, 2026.
The report hedged and the relay did not
CrowdStrike's October 7, 2026, report assessed, with moderate confidence, that one financially motivated operator ran the campaign against South Korean financial institutions, likely a Chinese speaker and possibly a 26-year-old in Guangdong province; it named no adversary 3.
The capability underneath is real. ARTEX, an open-source attack agent published on GitHub−2.11% — GitHub, down 2.11 percent today this year, connects to commercial models including Anthropic's$350B — Anthropic, private, latest valuation $350B Claude and DeepSeek, and the suspect used it alongside Claude Code 3. One person directing a pack of AI agents at a country's banks is an observed capability; who that person is, and whether he worked alone, is CrowdStrike's estimate.
Within days the finding had crossed social media as settled fact: "CLAUDE EXPOSED A HACKER WHO HIT 7 BANKS IN SOUTH KOREA AT ONCE" 5. The post carries none of the report's hedges, and the count changed in the retelling: Reuters counts at least nine banks disclosed or reported by local media as targeted 3.
The bull case rests on the vendor's own intel
On October 15, 2026 Citi+0.78% — Citi, up 0.78 percent as of its last quote analyst Fatima Boolani raised her CrowdStrike target to $295 from $260, keeping a Buy rating, on survey findings that AI deployments are driving more security spending 1. The stock is still up 113 percent this year 1. BNP Paribas, the French bank, went further after talking to CrowdStrike's investor-relations team: the long-term targets may be conservative, because nearly half of enterprise endpoint systems still run legacy tools 2.
Those targets include $10 billion of annual recurring revenue by fiscal 2030, and BNP has said the company may beat them 6. It still carries a $180 price forecast, far below where the stock trades 6. Both banks expect the same demand; they disagree about what the shares should cost.
Both banks see the demand; the targets sit $115 apart
Data
| Value | |
|---|---|
| Citi, new | $295 |
| Citi, prior | $260 |
| BNP Paribas | $180 |
The research is the pitch, and sometimes it checks out
Both notes lean on threat research CrowdStrike produces itself, which doubles as the case for buying its Falcon platform. That pipeline can still generate checkable results: on October 13, 2026 CrowdStrike said its intelligence helped the FBI disrupt laptop farms used by the North Korea-linked FAMOUS CHOLLIMA operation to place fraudulent remote workers inside American companies 7.
Revenue growth has accelerated for five straight quarters
Data
| Revenue growth, year over year | |
|---|---|
| Q3 '23 | 35.3% |
| Q4 '23 | 32.6% |
| Q1 '24 | 33% |
| Q2 '24 | 31.7% |
| Q3 '24 | 28.5% |
| Q4 '24 | 25.2% |
| Q1 '25 | 19.8% |
| Q2 '25 | 21.3% |
| Q3 '25 | 22.2% |
| Q4 '25 | 23.3% |
| Q1 '26 | 25.6% |
| Q2 '26 | 25.8% |
The sale is noise and the quarter's number is the test
Kurtz's sale came to 20,000 shares across two days, under a trading plan adopted on January 6, 2026, and he kept about 7.5 million shares 4. The plan was set long before this month's reports. A scheduled sale that size is not a signal about the company's prospects.
The signal is the quarter now closing. CrowdStrike's last report set a record with about $333 million of net new annual recurring revenue, the bookings measure it reports each quarter, and management raised its full-year outlook afterward 9. If AI-driven attacks are converting into security budgets, net new recurring revenue has to clear a bar management has already raised. Fortinet−6.82% — Fortinet, down 6.82 percent as of its last quote, a rival security vendor, gives the sector its first read on October 28 10.
The test is customer spending, not self-reported threats
The chain from cheap AI-driven attack to bigger security budgets is real, and it most likely runs where the bulls say it does. What is untested is the conversion, and net new recurring revenue in the quarter ending October 31, 2026, is the first reading that comes from customer spending rather than from CrowdStrike's own account of the threats.
Deepdive
AI-generated from this story and its cited sources. Not investment advice.
