{
  "id": 12760025,
  "title": "South Korea bank hack suspect may be 26-year-old in China, U.S. firm says",
  "url": "https://urgent.news/2026/10/08/south-korea-bank-hack-suspect-may-be-26-year-old-in-china-u-s-firm",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-08T01:34:00.000Z",
  "source": {
    "name": "Japan Times",
    "slug": "japan-times",
    "url": "https://www.japantimes.co.jp/business/2026/10/08/south-korea-cyberattack-china-suspect/"
  },
  "original_language": "en",
  "account": "A U.S. cybersecurity firm has identified a possible suspect behind recent cyberattacks on South Korea's financial sector, according to Reuters. The suspect may be a 26-year-old individual residing in China's Guangdong province, as reported by CrowdStrike in a website post on Wednesday. The firm uncovered personal details linked to the attacker while examining AI-powered coding-tool sessions and infrastructure related to a campaign targeting South Korean financial institutions between late September and early October. CrowdStrike noted that the perpetrator utilized ARTEX, a recently released open-source penetration testing tool from China, alongside large language models and assessed with \"moderate confidence\" that the actor was likely Chinese-speaking and motivated financially. One Claude Code session included a request to generate a security researcher resume, which contained details such as a Telegram account, age, education background, and a location in Maoming, Guangdong, the report stated. The same Telegram username appeared in other cyber activities, including vulnerability research involving a Telegram-based non-fungible token marketplace and a suspected attack on a Chinese payment platform. While CrowdStrike believes the personal details likely belong to the attacker, they cautioned that current information may not definitively identify the individual. South Korean authorities are investigating multiple bank data breaches, including those affecting Shinhan Bank and KB Kookmin Bank. South Korean President Lee Jae Myung commented on Tuesday that signs indicated AI was used in some hacking incidents and called for stronger cybersecurity measures.",
  "summary": "CrowdStrike said the attacker used ARTEX, a recently released Chinese-developed open-source penetration testing tool.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 7,
    "also_reported_by": [
      {
        "outlet": "Techmeme",
        "title": "South Korea plans to launch a ~$3.5B program to develop a frontier AI model starting as early as March 2027 and will open a competition to select participants (Jie Ye-eun/The Korea Herald)",
        "url": "https://urgent.news/2026/10/06/south-korea-plans-to-launch-a-3-5b-program-to-develop-a-frontier-ai",
        "published": "2026-10-06T10:00:37.000Z"
      },
      {
        "outlet": "Quartz",
        "title": "Hackers used a Chinese AI tool to breach 7 South Korean banks",
        "url": "https://urgent.news/2026/10/06/hackers-used-a-chinese-ai-tool-to-breach-7-south-korean-banks",
        "published": "2026-10-06T11:50:34.000Z"
      },
      {
        "outlet": "The Business Times - Companies & Markets",
        "title": "South Korea investigates possible use of AI in hacks on its banks",
        "url": "https://urgent.news/2026/10/06/south-korea-investigates-possible-use-of-ai-in-hacks-on-its-banks",
        "published": "2026-10-06T12:04:13.000Z"
      },
      {
        "outlet": "The Hill",
        "title": "President of South Korea believes AI models were used in bank hacks",
        "url": "https://urgent.news/2026/10/06/president-of-south-korea-believes-ai-models-were-used-in-bank-hacks",
        "published": "2026-10-06T21:50:18.000Z"
      },
      {
        "outlet": "The Hindu - Sci-Tech",
        "title": "AI appears to have been used in bank hacks: South Korean President Lee",
        "url": "https://urgent.news/2026/10/07/ai-appears-to-have-been-used-in-bank-hacks-south-korean-president-lee",
        "published": "2026-10-07T05:42:18.000Z"
      },
      {
        "outlet": "Nikkei Asia",
        "title": "AI tools identified as part of cyberattacks on South Korean banks",
        "url": "https://urgent.news/2026/10/08/ai-tools-identified-as-part-of-cyberattacks-on-south-korean-banks",
        "published": "2026-10-08T00:33:18.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}