{"id":25130,"date":"2026-10-08T10:14:21","date_gmt":"2026-10-08T10:14:21","guid":{"rendered":"https:\/\/demo.tcjhomeaccents.com\/wp\/2026\/10\/08\/crowdstrike-links-south-korean-bank-breaches-to-ai-tools-and-a-china-suspect\/"},"modified":"2026-10-08T10:14:21","modified_gmt":"2026-10-08T10:14:21","slug":"crowdstrike-links-south-korean-bank-breaches-to-ai-tools-and-a-china-suspect","status":"publish","type":"post","link":"https:\/\/demo.tcjhomeaccents.com\/wp\/2026\/10\/08\/crowdstrike-links-south-korean-bank-breaches-to-ai-tools-and-a-china-suspect\/","title":{"rendered":"CrowdStrike links South Korean bank breaches to AI tools and a China suspect"},"content":{"rendered":"<p>CrowdStrike signage in Sunnyvale, California. Credit: bluestork via Shutterstock The person behind a wave of cyberattacks on South Korean banks may be a 26-year-old living in China\u2019s Guangdong province, US cybersecurity firm CrowdStrike says. The suspect has not been named or charged, and South Korean authorities have not identified anyone. CrowdStrike set out its findings in a\u00a0report published on October 7, and\u00a0Reuters reported the age-and-location link.<\/p>\n<p>The company says it cannot firmly link these details to the attacker. According to the report, the attacks hit South Korean financial firms from late September to early October, and data was stolen. The attacker used ARTEX, a free Chinese AI tool that runs mock hacks to find security gaps. It also used Anthropic\u2019s Claude Code and other AI models.<\/p>\n<p>CrowdStrike found the attacker\u2019s AI chat logs in open folders on servers the attacker ran. In one chat, the user asked Claude to write a CV with an age, a university, and a home in Guangdong. However, a date of birth given earlier did not match that age, the report notes. CrowdStrike said it has moderate confidence the attacker speaks Chinese and is likely driven by money.<\/p>\n<p>It did not tie the attacks to any known hacking group. In other chats, the user asked Claude where Korean breach data is sold, the report said. Reuters called a phone number listed in the report, and the man who answered told Reuters he knew nothing about the matter. Anthropic, South Korean police, and China\u2019s foreign ministry did not immediately respond to Reuters\u2019 requests for comment.<\/p>\n<p>Meanwhile, South Korean police opened a\u00a0formal investigation\u00a0on October 6,\u00a0The Asia Business Daily\u00a0reported. It covers seven financial firms, including Shinhan Bank, KB Kookmin Bank, and Hana Bank. Reuters counts at least nine banks targeted since late September. Shinhan said personal data of about 25,000 customers was exposed, while KB Kookmin put its figure at 119, according to Reuters.<\/p>\n<p>Moreover, President Lee Jae Myung raised the AI angle at a cabinet meeting\u00a0the same day. \u201cIn some hacking cases, details have emerged of the possible use of AI,\u201d Lee said, according to\u00a0Korea JoongAng Daily. The case follows Australia\u2019s disclosure that an\u00a0OpenAI agent\u00a0broke into a government health statistics portal.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CrowdStrike signage in Sunnyvale, California. Credit: bluestork via Shutterstock The person behind a wave of cyberattacks on South Korean banks may be a 26-year-old living in China\u2019s Guangdong province, US cybersecurity firm CrowdStrike says. The\u2026<\/p>\n","protected":false},"author":1,"featured_media":25131,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-25130","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/demo.tcjhomeaccents.com\/wp\/wp-json\/wp\/v2\/posts\/25130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/demo.tcjhomeaccents.com\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/demo.tcjhomeaccents.com\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/demo.tcjhomeaccents.com\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/demo.tcjhomeaccents.com\/wp\/wp-json\/wp\/v2\/comments?post=25130"}],"version-history":[{"count":0,"href":"https:\/\/demo.tcjhomeaccents.com\/wp\/wp-json\/wp\/v2\/posts\/25130\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/demo.tcjhomeaccents.com\/wp\/wp-json\/wp\/v2\/media\/25131"}],"wp:attachment":[{"href":"https:\/\/demo.tcjhomeaccents.com\/wp\/wp-json\/wp\/v2\/media?parent=25130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/demo.tcjhomeaccents.com\/wp\/wp-json\/wp\/v2\/categories?post=25130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/demo.tcjhomeaccents.com\/wp\/wp-json\/wp\/v2\/tags?post=25130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}