AI NewsWaveHacker Behind Attacks on Korean Financial Sector Believed to Be 26-Year-Old in China's Guangdong, CrowdStrike Report Says
Key points
- Chain of financial hacks traced to a 26-year-old in China
- Hong Kong server used as main control infrastructure
- Signs of AI tools such as DeepSeek being used
A hacker who repeatedly attacked Korean financial institutions may be a 26-year-old living in China's Guangdong Province. That is the analysis in a report released on the 7th (local time) by the cybersecurity company CrowdStrike.
According to Chosun Biz, the attacker used a server in Hong Kong as the main control infrastructure and carried out the actual attacks from a separate server. Korea NGO Times (한국NGO신문) and Chosun Biz reported that it was confirmed the attacker used tools such as the Chinese AI model DeepSeek.
EBN reported that traces of personal information left in the generative AI tools used in the attacks became a clue for tracking, and Industry News (인더스트리뉴스) said signs also emerged that a Telegram account was used. The person's identity is an estimate, not a definitive finding.