South Korea bank hack suspect may be 26-year-old in China, U.S. firm says

South Korea bank hack suspect may be 26-year-old in China, U.S. firm says Authorities in Seoul are investigating cyberattacks that affected multiple financial institutions after banks, including Shinhan Bank and KB Kookmin Bank, reported data breaches. SEOUL - The suspect behind recent cyberattacks targeting South Korea's financial sector may be a 26-year-old based in China's Guangdong province, U.S. cybersecurity firm CrowdStrike has said. In a report published on its website on Wednesday, CrowdStrike said it uncovered personal details linked to the suspected attacker while analyzing AI coding-tool sessions and infrastructure associated with a campaign targeting South Korean financial institutions from late September to early October. CrowdStrike said the attacker used ARTEX, a recently released Chinese-developed open-source penetration testing tool, alongside large language models and assessed with "moderate confidence" that the actor was a Chinese speaker and likely financially motivated. The firm said one Claude Code session contained a request to create a security researcher resume describing results from the hacking activity.