A recent cyberattack on South Korean banks has been attributed to a China-based hacker who utilized artificial intelligence tools to steal data.
What happened
The attack, which occurred from late September to early October, employed conventional hacking techniques combined with AI-assisted software. The hacker used an open-source penetration-testing tool called ARTEX, developed in China, along with large language models.
According to CrowdStrike, a US cybersecurity company, the attacker was likely a Chinese speaker with financial motivations. The company assessed that the attacker used two servers, one based in Hong Kong and the other running the ARTEX tool, to carry out the attacks.
At least nine South Korean banks have been targeted, with some reporting the compromise of customer personal information. South Korean regulators have urged lenders to open help desks and tighten fraud checks, while police investigate the breaches.
The use of AI tools in the attack has raised concerns about the evolving nature of cyber threats. CrowdStrike noted that the attack demonstrates how cybercriminals are employing AI agents to carry out tasks on their own.
