CrowdStrike details AI-assisted attacks against Korean financial institutions

Adam Meyers, senior vice president of counter adversary operations at CrowdStrike, presented findings that an attacker targeted Korean financial institutions using ARTEX, a Chinese-developed AI penetration-testing tool, alongside large language models. Meyers stated that while AI provided the attacker with skills, the attack succeeded because of poor security hygiene and basic security gaps in the systems. The investigation traced the attacker's servers and recovered AI session records.

The findings underscore the growing risk posed by the combination of sophisticated AI tools and fundamental security weaknesses within financial infrastructure. This situation increases the operational risk for Korean Banks and emphasizes the need for greater investment in cybersecurity defenses.