CrowdStrike links South Korean bank breaches to AI tools and a China suspect
The person behind a wave of cyberattacks on South Korean banks may be a 26-year-old living in China’s Guangdong province, US cybersecurity firm CrowdStrike says.
The suspect has not been named or charged, and South Korean authorities have not identified anyone.
CrowdStrike set out its findings in a report published on October 7, and Reuters reported the age-and-location link. The company says it cannot firmly link these details to the attacker.
According to the report, the attacks hit South Korean financial firms from late September to early October, and data was stolen.
The attacker used ARTEX, a free Chinese AI tool that runs mock hacks to find security gaps. It also used Anthropic’s Claude Code and other AI models.
CrowdStrike found the attacker’s AI chat logs in open folders on servers the attacker ran.
In one chat, the user asked Claude to write a CV with an age, a...
Copyright of this story solely belongs to thenextweb.com. To see the full text click HERE