Seven South Korean Financial Firms Hit by Suspected AI Assisted Hacks

Seven South Korean financial firms suffered intrusions that exposed information from auxiliary systems, with authorities finding traces of an AI based penetration tool in addresses used against banks, according to ChosunBiz. The affected institutions were Shinhan Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank, Yegaram Savings Bank, Welcome Savings Bank and Hyundai Capital.

Attackers repeatedly entered systems while rotating addresses from countries including South Korea, the United States, Japan, Singapore and the United Kingdom. Internet and mobile banking services were not affected, and authorities have confirmed no monetary damage.

Investigators found traces of ARTEX AI, an open source autonomous security testing tool that uses a large language model to identify vulnerabilities and attempt intrusions. Authorities are examining whether attackers used the tool to automate attacks across multiple firms, but its public availability and the distributed addresses make attribution difficult.

The breaches involved weaknesses including services that exposed loan application or corporate representative information without identity checks, failed mobile access controls and unpatched website servers. The Financial Supervisory Service shared the attacking addresses and security guidance with about 500 financial firms, with inspections due from October 6 to October 8 and voluntary remediation continuing through November.