Domestic Banks Breached One After Another in AI-Powered Hacking Attacks

South Korean banks have been breached one after another in hacking attacks leveraging AI (artificial intelligence). With both major commercial banks and secondary financial institutions targeted, traces were also found suggesting the use of a Chinese-language-based AI. Attack traces were confirmed at Shinhan Bank, followed by KB Kookmin Bank, Hana Bank, and BNK Busan Bank, while at Yeagaram Savings Bank, the personal data of approximately 40,000 individuals was confirmed to have been leaked.

Chinese-language strings were found on the web server (a computer that operates an internet website) believed to have been used in the attack on Shinhan Bank, and the industry views these traces as connected to a Chinese-language-based AI hacking tool known as 'Artex AI.' Moon Jong-hyun, head of a center at security firm Genians, said, "During the investigation, code containing the string 'Artex' was discovered, making it suspicious in light of the circumstances." 'Penetration testing tools' are originally programs designed to check for system vulnerabilities, but hackers can also use them as weapons.

AI-based attacks differ in nature from conventional hacking. They can automatically identify targets and repeatedly exploit vulnerabilities. Because they penetrate systems while continuously changing IP addresses, they are also difficult to trace. Lim Jong-in, a professor at the Graduate School of Information Security at Korea University, analyzed, "It appears the same organization was testing whether their own hacking tools worked properly."

The banks have launched a response. They are blocking specific IPs that were used redundantly in the attacks and conducting security vulnerability checks.