The intrusions targeted 7 financial institutions, including Shinhan Bank, KB Kookmin and Hana Bank, and leaked data from about 68,000 customers. CrowdStrike identified the attacks as some of the first AI powered entries into the global financial system, attributing them to an operator using the open source ARTEX agent with DeepSeek v4.1-Flash, GLM-5.3 and Grok 4.6 models. President Lee Jae Myung ordered a full investigation after the suspect was reportedly unmasked by leaving public access to his own Claude Code sessions and a professional résumé.
Wednesday, October 21, 2026
Story
China Denies AI Tool Use in South Korean Bank Hacks
Cybersecurity13 days ago
A 26 year old man accused of orchestrating cyberattacks on the financial sector in Seoul now claims he was framed and is actually employed at a convenience store in Henan. Beijing's Foreign Ministry separately warned that accusations of a domestic operator utilizing AI to steal banking data may be based on 'politically motivated misinformation,' stating that the Chinese government does not know the specifics of the intrusions.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.