AI hacking tool in Korean bank breaches found on hundreds of servers worldwide
Security firm S2W says the same open-source AI intrusion tool used in the hacks on South Korea's banks is now running on hundreds of servers worldwide, as police open a formal investigation into breaches exposing data on about 68,000 people.
The same open-source AI intrusion tool used in the recent hacks on South Korea’s financial sector has been found running on hundreds of servers worldwide, security and data intelligence firm S2W said in a threat-intelligence report released on October 8. Attackers bypassed bank security systems by rotating prebuilt relay servers, overseas proxies and new IP addresses not listed on global threat-reputation databases, making traditional IP blocking insufficient (Chosun Biz).
The tool, which outlets spell as ARTEX or Artex, was identified by S2W as an open-source AI intrusion tool, while a separate Yonhap report cited by RuntimeWire says security firm AhnLab found ARTEX on about 600 IP addresses worldwide (RuntimeWire). Police have designated a dedicated investigation team and launched a formal probe into the breaches affecting seven firms: Shinhan Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank, Welcome Savings Bank, Yeogaram Savings Bank (spelled Yegaram in the Yonhap account) and Hyundai Capital.
About 68,000 people’s data was exposed, according to The Wall Street Journal, via (NDTV Profit). Leaked information includes customer names, contact information and loan-inquiry histories — but not core payment data such as account PINs or one-time passwords, financial authorities say.
President Lee Jae Myung said on Tuesday there were signs AI was used in some attacks, while experts caution the tool was human-directed and its origin does not identify the operator (IOL/AFP).
More on this topic: all Technology stories
