China-based actor may have used AI to attack South Korean banks, CrowdStrike says
( October 8, 2026, 08:19 GMT | Official Statement) -- MLex Summary: US-based cybersecurity company CrowdStrike said Wednesday that a person aged 26 and based in China’s Guangdong Province may be behind a series of recent data breaches at South Korean banks and non-bank financial companies. The company said its analysis indicated that the attacker used a Hong Kong-based server as the primary control infrastructure and a separate server to carry out attacks against South Korean targets, relying mainly on the Chinese artificial intelligence model DeepSeek. It also said the attacker conducted operations using ARTEX and asked Claude where threat actors typically sell data stolen in South Korean breaches. CrowdStrike said the use of agentic AI tools alongside traditional offensive capabilities highlights the continued evolution of adversarial tradecraft. The activity demonstrates how AI tools can enable a financially motivated attacker to carry out multiple intrusions within a short period, it said.The statement follows....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.