South Korean banks were likely hacked by a China-based actor with an AI agent, CrowdStrike says

Live updates

1. 3h ago

   China-Based Actor Used AI Agent to Hack South Korean Banks

   A China-based 26-year-old suspect is likely behind recent cyberattacks on South Korean financial institutions, according to cybersecurity firm CrowdStrike. The threat actor utilized a Chinese-developed artificial intelligence agent alongside Anthropic technology to breach major banking cyber defenses and exfiltrate data. These breaches exposed personal records belonging to 60,800 people and triggered warnings from South Korean authorities about AI-assisted hacking campaigns. In response to the incidents, the Chinese developer of the ARTEX artificial intelligence pentesting tool made the software closed-source.

   Why it matters

   The attacks highlight an escalating cybersecurity threat where artificial intelligence lowers the barrier for cybercriminals to compromise complex corporate networks. Financial institutions across South Korea and Japan face intensified digital assaults as attackers leverage automated intelligence tools to find and exploit vulnerabilities. The incident underscores growing international concern regarding the weaponization of commercial and developer-accessible artificial intelligence systems.

   What is confirmed

   • South Korean banks were targeted by a cyberattack that resulted in exfiltrated data and exposed records for 60,800 people.
   • Cybersecurity firm CrowdStrike linked the attacks on South Korean financial institutions to a China-based suspect using an AI agent.
   • The Chinese developer of the ARTEX AI pentesting tool made the software closed-source following the bank hacks.
   • South Korea issued warnings regarding AI-assisted hacking after the breach of major bank cyber defenses.

   Still unconfirmed

   • The suspect behind the cyberattacks is specifically a 26-year-old individual based in China.

   What to watch next

   • Further technical attribution or arrests related to the China-based suspect
   • Additional security measures implemented by South Korean financial institutions against AI-driven threats
   • Developer policy changes regarding the availability of ARTEX and similar pentesting tools
   Sources used for this update (13)

   1. WSJ — Hackers Use Chinese AI Tool to Hit South Korean Banks, Exposing New Risk
   2. Reuters — CrowdStrike says China-based suspect used AI tools in South Korean bank hacks
   3. NewsNation — Banks increasingly under AI attack: How can you stay safe?
   4. Reuters — Chinese developer makes ARTEX AI agent closed-source after Korean bank hack
   5. Bloomberg.com — Hacker Who Hit Korean Banks Likely from China, CrowdStrike Says
   6. dw.com — South Korea warns of AI-assisted hacking after breach of big banks' cyber defenses
   7. Reuters — South Korea, Japan buffeted by hacks as AI lowers bar for cybercriminals
   8. The Hacker News — ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
   9. biz.chosun.com — Chinese AI powers hacks on South Korea’s banks, exposing 60,800 people
   10. www.yahoo.com — South Korean banks were likely hacked by a Chinese-based ...
   11. www.globalbankingandfinance.com — CrowdStrike: China-Based Suspect Used AI in South Korean Bank ...
   12. www.crowdstrike.com — Unknown Threat Actor Uses AI-Driven ARTEX to Target South ...
   confidence 95%