{
  "id": 12812524,
  "title": "Korea intensifies efforts to track hackers behind bank cyberattacks",
  "url": "https://urgent.news/2026/10/08/korea-intensifies-efforts-to-track-hackers-behind-bank-cyberattacks",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-08T07:07:03.000Z",
  "source": {
    "name": "The Korea Times",
    "slug": "the-korea-times-koreatimes",
    "url": "https://www.koreatimes.co.kr/economy/20261008/korea-intensifies-efforts-to-track-hackers-behind-bank-cyberattacks"
  },
  "original_language": "en",
  "account": "Korea is ramping up efforts to trace the hackers responsible for a series of sophisticated cyberattacks on major financial institutions, utilizing artificial intelligence (AI) assistance, authorities announced on Thursday. A global cybersecurity firm, CrowdStrike, identified a likely suspect based in China, noting the attacker's probable Chinese linguistic background and financial motivation. The firm observed the use of ARTEX, a Chinese-developed autonomous penetration-testing tool, along with Chinese-language prompts during the attacks. CrowdStrike further suggested that DeepSeek's V4.1-Flash served as the large language model backend for ARTEX, while GLM-5.3 from Chinese AI company Zhipu AI and Grok 4.6 were employed in separate Claude Code sessions. The most compelling evidence came from a Claude Code session where the attacker requested the AI tool to create a resume for a security researcher, providing details such as a 26-year-old age and an educational background at Sou.",
  "summary": "Authorities are stepping up efforts to identify the hackers behind an unprecedented series of artificial intelligence (AI)-assisted cyberattacks targeting Korea's major financial institutions, Thursday, as a global cybersecurity firm pointed to a possible suspect based in China. CrowdStrike said in a report released the previous day that the threat actor was likely a Chinese speaker and…",
  "key_points": [
    "Korea intensifies efforts to track hackers behind bank cyberattacks.",
    "CrowdStrike identifies likely Chinese hacker using ARTEX tool.",
    "DeepSeek's V4.1-Flash and Zhipu AI's GLM-5.3 used in attacks."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Korea Times",
        "title": "Korea intensifies efforts to track hackers behind bank cyberattacks",
        "url": "https://urgent.news/2026/10/08/korea-intensifies-efforts-to-track-hackers-behind-bank-cyberattacks-12816307",
        "published": "2026-10-08T07:32:03.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}