CrowdStrike identified a likely financially motivated hacker in China. This individual is suspected of recent cyberattacks on South Korea's financial sector.
The investigation suggests a 26-year-old individual from Guangdong province. This person used ARTEX, a Chinese-developed AI penetration testing tool. The attacks also leveraged large language models, including Anthropic's Claude. The attacks occurred between late September and early October.
CrowdStrike analysts uncovered the suspect's personal details. They analyzed the attacker's AI coding tool sessions, which contained resume-building prompts.
The campaign targeted multiple financial institutions. These included Shinhan Bank and KB Kookmin Bank.
The incident heightened concerns about AI agents in cyberattacks. South Korean authorities launched a probe. They also called for stronger security measures.