He used artificial intelligence as a weapon! Infiltrated banking systems and stole data

Details of a cyber attack that alarmed the financial world have emerged. It was determined that a hacker, whose identity has not yet been determined and who is thought to speak Chinese, infiltrated the systems of multiple financial institutions using artificial intelligence-supported tools and seized critical data.

THE METHOD HE USED DRAWED ATTENTION

The most striking aspect of the attack was the method used. According to the findings of the US-based cyber security company CrowdStrike, the hacker targeted banking systems by using large language models (LLM) together with an open source penetration testing tool developed in China.

HIS IDENTITY HAS NOT BEEN DETERMINED YET

According to CrowdStrike's report, the attacker used an open-source penetration testing tool developed in China called ARTEX with large language models.

Targets included a bank's credit inquiry service and another financial institution's mobile support platform for employees.

While this method raises concerns about how artificial intelligence can be used in cyber attacks, the identity of the person behind the attack has not yet been determined.

THE ATTACK TRACED TO HONG KONG

CrowdStrike identified two servers thought to be linked to the attacks. It was determined that one of the servers was located in Hong Kong. However, the identity of the attacker, the person or group the attack is linked to, and whether any state actor is behind the attack have not yet been confirmed.

IS MONEY THE MAIN TARGET?

Another detail in the cyber security company's report gave an important clue about the possible purpose of the attack.

CrowdStrike found that the attacker was researching online marketplaces where the stolen data was sold. For this reason, it was evaluated that the motivation behind the attack might be to gain financial gain.

However, it is not yet clear what exactly the captured data was, how much information the attacker stole, and whether the data was actually put up for sale.

THE TARGET WAS SOUTH KOREA'S FINANCIAL SYSTEM

The address of the attack was later revealed: South Korea. According to Yonhap News Agency's CrowdStrike report, the attacks targeted multiple institutions in the country's financial sector.