crowdstrike says chinabased
| | | |

CrowdStrike says China-based suspect used AI tools in South Korean bank hacks

ByJustpaste.in

SEOUL, South Korea – The suspect behind recent cyberattacks targeting South Korea’s financial sector may be a 26-year-old based in China’s Guangdong province who used a Chinese-developed AI agent toolcalled ARTEX and Anthropic’s ClaudeCode, US cybersecurity firm CrowdStrike said.

In a report published on Wednesday, October 7, CrowdStrike said it uncovered personal details linked to the suspected attacker while analyzing AI coding-tool sessions and infrastructure associated with a campaign targeting South Korean financial institutions from late September to early October.

The case is likely to intensify concerns over the rise of AI agents and whether organizations are prepared to defend their systems against them.

Australia said last month that an OpenAI autonomous agent breached a government health statistics portal in June, marking one of the first known instances of an AI agent hacking a government system.

CrowdStrike said the attacker used ARTEX, a recently released Chinese-developed open-source penetration testing tool, alongside large language models such as Claude.

“While this activity has not been attributed to a named adversary, the threat actor is likely a Chinese speaker and financially motivated,” it said.

“This assessment is made with moderate confidence based on the use of the Chinese-developed tool ARTEX and observed Chinese-language prompts.”

Bank hacks

CrowdStrike said the individual also asked Claude where threat actors typically sell Korean data breach information and sought assistance in finding Korean Telegram data sales groups.

In another session, the person also requested Claude to create a security researcher resume, which included details such as a Telegram account, age, educational background and a location in Maoming, a city in the southern Chinese province of Guangdong, which CrowdStrike said likely belonged to the attacker.

A man who answered a phone number provided by CrowdStrike in its report said he had no knowledge of the matter.

Anthropic, South Korean police and China’s foreign ministry did not immediately respond to requests for comment.

ARTEX is an open-source AI agent for automated penetration testing that was published on GitHub this year by a Chinese security engineer with the handle Autumn. It is not a standalone large language model but connects to external LLMs such as ChatGPT, Claude and DeepSeek to help organisations test for vulnerabilities in the networks.

The tool’s GitHub page says it is intended for personal learning, code research and local technical verification and should not be used to conduct real-world testing against online systems or websites.

At least nine South Korean banks have disclosed or have been reported by local media as having been targeted by cyberattacks since late September, prompting South Korean police to launch a probe this week and President Lee Jae Myung to call for robust response measures.

Shinhan Bank said last week that personal information of about 25,000 of its customers was compromised, while KB Kookmin Bank said that the personal information of 119 of its customers was leaked. – Rappler.com

Similar Posts

  • | |

    Bessent says Hormuz shipping deal with Iran could …

    ByJustpaste.in

    US Treasury Secretary Scott Bessent said on Tuesday that a deal to reopen the Strait of Hormuz to normal shipping traffic could be reached within a day or two, as diplomatic activity intensified across the Gulf region. Speaking in a television interview, Bessent said American officials are in active discussions with Iranian counterparts and expressed optimism about a near term breakthrough. “There is a chance we may have a deal today or tomorrow,” he said, adding that the goal is to move toward a more normalized posture in the conflict. Asked whether any agreement would let Iran charge ships a toll for using the waterway, Bessent said he expects the outcome to guarantee freedom of movement rather than a fee based system. He noted that vessel traffic through the strait has picked up in recent days despite lingering danger, and predicted that energy prices would ease once a deal takes hold. His comments followed a report from The New York Times saying Iran and Oman have moved close to an arrangement that would restore commercial shipping through the strait. Under the terms described in that report, inbound vessels would travel through a corridor close to the Iranian coast while outbound ships would use a route nearer Oman. Iranian officials told the newspaper that no formal tolls would apply, though they said a service charge tied to environmental protection, cargo security and staffing costs would be split evenly between Tehran and Muscat. A US official pushed back on that characterization, calling the Iranian version inaccurate and insisting any temporary shipping lanes would not need Iranian sign off or involve fees. The report also noted that some Pentagon officials worry the arrangement could look like a concession to Tehran, while some Iranian officials privately questioned whether it would actually stop further American strikes. Qatar’s Foreign Ministry said Tuesday that mediators including Doha, Pakistan and Oman continue to coordinate closely to bridge the gap between Washington and Tehran, exchanging draft proposals between the two sides. Ministry spokesperson Majed Al Ansari said there is still no clear timeline for a final agreement, and Qatar separately called for a return to normal conditions in the strait while diplomacy continues. Tension over the waterway remained visible even as talks progressed. A dry bulk carrier called the Minoan Pioneer, sailing under the Liberian flag, was struck by an unidentified projectile near Oman’s coast on Tuesday, according to maritime security sources. The strike reportedly hit the engine room and sparked a fire in the crew’s living quarters, forcing the entire crew to abandon ship. One crew member, the vessel’s third engineer, was reported missing. The ship’s Greece based operator did not immediately respond to requests for comment. The incident followed an earlier report from the UK Maritime Trade Operations center, which said a separate cargo vessel had broadcast that it was hit by an unknown projectile about 20 nautical miles northeast of Khasab, Oman. No group has claimed responsibility for either strike, and authorities have opened an investigation. In Tehran, President Masoud Pezeshkian used a televised address to reject reports that he had offered his resignation amid the ongoing standoff with Washington. “If I were going to resign, I would announce it publicly,” he said, denying any rift with Supreme Leader Ali Khamenei or the armed forces and insisting the leadership is working in full coordination. He separately said Iran intends to defend its territorial integrity but has no interest in expanding the conflict, while claiming Iranian missile and drone strikes had disrupted US military goals during a recent 17 day period of fighting. The regional picture grew more complicated elsewhere. Yemen’s Houthi movement claimed responsibility for a drone strike on Najran Airport in southern Saudi Arabia, with military spokesman Yahya Saree saying the attack struck its target accurately. He described the strike as retaliation for alleged Saudi drone incursions over Yemen’s Saada and Hajjah provinces and warned that further violations would draw a response. Saudi authorities had not commented on the claim as of Tuesday. In Lebanon, a seventh round of direct negotiations with Israel opened in Rome under American sponsorship, continuing talks tied to a framework agreement the two sides signed in June covering a phased Israeli withdrawal from Lebanese territory in exchange for Lebanese army deployment and the disarming of armed factions, a clear reference to Hezbollah. Hezbollah Secretary General Naim Qassem used a speech at an Arbaeen commemoration in Baalbek to criticize the talks, saying they have delivered only “shame, humiliation, despair and repeated concessions” for Lebanon. He accused Lebanese President Joseph Aoun of acting with bias rather than serving as a unifying figure and argued that only the earlier US brokered truce between Washington and Tehran had kept Israeli strikes at bay. Financial markets showed relief at the signs of diplomatic movement. Brent crude futures fell about 7 percent to near $83.77 a barrel on Monday, while the Dow Jones Industrial Average closed at a record high. Asian stocks and oil prices ticked higher again on Tuesday. In a Truth Social post, Trump described Iran’s leadership as “unbelievably duplicitous” while claiming more talks were scheduled for the near future. He also reasserted that the US Navy maintains full control over the strait, writing that nothing passes through unless Washington allows it. The exchange fits a broader pattern that has defined the conflict since it began roughly five months ago under the codename Operation Epic Fury. Trump has repeatedly threatened major military escalation only to step back and cite diplomatic openings, while Iran has publicly refused direct talks with Washington since a memorandum of understanding both sides signed collapsed in early July. Washington maintains that June’s memorandum obligated Iran to open the Strait of Hormuz to shipping, while Tehran insists the agreement preserved its authority over traffic through the waterway, a disagreement that continues to sit at the center of the standoff.

  • Why the five-day office week may disappear

    ByJustpaste.in

      For many New Yorkers, commuting to the office remains a significant part of daily life. The average worker spends around 53 minutes travelling each way, but Mark Dixon, CEO of workspace giant IWG, believes this routine may look very different within the next 15 years. Research conducted by IWG in partnership with engineering consultancy Arup suggests that younger generations are already developing very different expectations about where and how they will work. According to the research, 80% of Gen Alpha—the oldest members of which are currently only 16 years old—expect flexible working to become the standard by 2040. Dixon argues that the attitudes of today’s teenagers could fundamentally reshape the workplace. He told Fortune that future generations may find it difficult to understand why people once spent hours travelling to an office simply “to sit down and use a computer.” In other words, the traditional office may eventually seem as outdated to younger workers as other workplace practices from previous generations seem today. The research also highlights how strongly Gen Alpha values shorter commutes. Only about one-quarter of those surveyed said they would be willing to accept a journey of more than 30 minutes to work. Most expect to work close to their homes or work remotely from home altogether. From Dixon’s perspective, the current push by some companies to bring employees back to the office is likely to be a temporary adjustment rather than a permanent reversal of the remote-work trend. Evidence from the National Bureau of Economic Research (NBER) points in a similar direction. Researchers analysed data involving approximately 8,000 American employees and found an interesting relationship between a CEO’s age and office attendance requirements. Younger CEOs tend to require fewer days of in-person work than their older counterparts. As younger executives increasingly move into leadership positions, the researchers suggest that the traditional five-day office week could gradually become obsolete. The NBER study also identified another important connection: leaders who are more supportive of remote work tend to be quicker to adopt new technologies and software-based management systems. This suggests that workplace flexibility may be connected to a broader willingness to embrace technological change. Dixon takes this argument even further. He believes companies that remain focused on physical presence while failing to embrace workplace flexibility and artificial intelligence could eventually struggle to compete. In a rapidly changing business environment, organizations may need to prioritize results, collaboration and technological innovation over simply measuring whether employees are physically sitting at their desks.   Brian O’Kelley, the founder of climate-tech company Scope3 and former CEO of AppNexus, which was sold to AT&T for $1.6 billion, shares a similar view. He argues that CEOs who impose strict office requirements may not be giving enough attention to preparing their organizations for an AI-driven future. Ultimately, the workplace of 2040 could look very different from today’s. As younger leaders enter positions of influence and technologies such as AI become increasingly integrated into everyday business, flexibility may become less of an employee benefit and more of a fundamental feature of how companies operate.

  • | | |

    Trump says US has ample weapons, ammunition stockpiles

    ByJustpaste.in

    US President Donald Trump has said the United States possesses extensive stockpiles of weapons and ammunition, dismissing concerns about shortages during recent military operations. In a statement, Trump said the country is continuing to manufacture weapons on a large scale while also procuring additional supplies as needed. He added that defense companies are building a record number of plants and factories to strengthen America’s military production capacity. Trump also warned that those responsible for leaking what he described as “treasonous statements” would be identified and face lengthy prison sentences. His remarks came after reports in the US media claimed that he had questioned Defense Secretary Pete Hegseth over alleged shortages in US weapons stockpiles during the conflict with Iran. According to the reports, the issue had limited Washington’s military options against Tehran. The reports stated that Trump raised the matter during a Cabinet meeting held at Camp David in Maryland last week, where he reportedly sought an explanation from Hegseth about the significant decline in ammunition reserves. However, US officials have denied the media reports, rejecting claims that the country faced a critical shortage of weapons or that military options against Iran were constrained because of depleted stockpiles.

  • |

    Investigative report reveals new human smuggling network 

    ByJustpaste.in

      An investigative report has revealed that human smuggling networks have established a new and well-organized operation to transport undocumented migrants from the United Kingdom to mainland Europe. The report highlights how criminal groups are exploiting vulnerable migrants by offering illegal travel services, often presenting them as safe and reliable routes to European countries where migrants believe they have a better chance of obtaining legal residency. According to the investigation, smugglers charge approximately £1,000 per person to transport migrants across the English Channel from the United Kingdom to continental Europe. Those wishing to continue their journey to Spain are reportedly asked to pay an additional £500. Spain has become an attractive destination because of recent immigration policies that are widely perceived as providing greater opportunities for undocumented migrants to regularize their legal status. The report explains that these criminal organizations have adopted sophisticated marketing strategies, using social media platforms to advertise their services. Their promotional posts resemble travel packages rather than illegal migration schemes. The advertisements often feature appealing images of famous European cities such as Berlin, Paris, Rome, and other popular destinations, creating the impression of a safe and exciting journey. By using professional-looking graphics and persuasive language, smugglers attempt to gain the trust of potential clients. The investigation further states that these groups specifically target individuals whose UK visas have expired or whose immigration status is uncertain. Many of these migrants fear deportation or have exhausted legal options to remain in Britain, making them particularly vulnerable to the promises made by smugglers. Criminal networks assure them that they can avoid detection by British immigration authorities and safely reach mainland Europe. According to the report, smugglers often claim that once migrants enter the Schengen Area, they may benefit from the freedom of movement available within many European countries. Although these claims can be misleading and depend on individual legal circumstances, they are frequently used to persuade migrants to undertake dangerous and illegal journeys. In some cases, migrants are transported across different European countries using taxis and privately hired vehicles, allowing smugglers to bypass traditional border checkpoints and reduce the likelihood of interception. A major reason Spain has become a central focus of these smuggling operations is the country’s efforts to address labor shortages. The report notes that the Spanish government has introduced a broad immigration regularization program designed to grant legal status to certain undocumented migrants under specific conditions. As part of this amnesty initiative, approximately 1.2 million applications have reportedly been submitted. Of these, nearly 600,000 individuals have received renewable residence permits, allowing them to live and work legally in Spain. Human smugglers have seized upon these developments as a selling point in their advertising campaigns. They present Spain as a destination where undocumented migrants have a greater chance of securing legal residency after arrival. However, experts caution that such claims are often exaggerated or oversimplified. Eligibility for legal status depends on meeting strict legal requirements, and many migrants may not qualify despite the promises made by smugglers. The report also emphasizes the role of social media in facilitating these illegal activities. Platforms that were originally designed for communication and business promotion are increasingly being exploited by organized crime groups to recruit clients, negotiate payments, and coordinate transportation. The ease of anonymous communication and the global reach of these platforms make it easier for smugglers to expand their operations while making it more difficult for law enforcement agencies to identify and dismantle their networks. Meanwhile, the British government continues to stress that it is intensifying efforts to combat international human smuggling organizations. Officials say that law enforcement agencies on both sides of the English Channel are working closely together to investigate criminal networks, disrupt their operations, and prosecute those responsible. The government has also strengthened border surveillance and tightened immigration enforcement in an effort to discourage irregular migration and reduce opportunities for smugglers to operate. Authorities argue that stronger international cooperation is essential because these criminal organizations often operate across multiple countries, making investigations more complex. Intelligence sharing, joint operations, and improved border security are considered key elements in tackling transnational human trafficking and smuggling. Migration experts, however, believe that enforcement measures alone may not be sufficient. They argue that as long as significant differences remain between the immigration policies of European countries, human smuggling networks will continue to identify new routes and exploit legal loopholes. Criminal groups are highly adaptable and frequently alter their methods in response to changing border controls and government policies. Experts also warn that undocumented migrants remain at serious risk of exploitation throughout their journeys. Many face dangerous travel conditions, financial exploitation, deception, and abuse at the hands of smugglers. Some migrants lose large sums of money, while others become victims of forced labor or other forms of exploitation after reaching their destinations. The investigation concludes that addressing the issue of human smuggling requires a comprehensive international strategy. In addition to stronger law enforcement, governments must improve legal migration pathways, enhance cooperation on immigration policies, and increase public awareness about the risks of relying on criminal smuggling networks. Without coordinated action across Europe, experts fear that these illegal operations will continue to evolve, placing thousands of vulnerable migrants at risk while generating significant profits for organized criminal groups.

Leave a Reply

Your email address will not be published. Required fields are marked *