Cybersecurity researchers at CrowdStrike said this week they found evidence that a threat actor based in China likely used an artificial intelligence agent in a campaign aimed at South Korean banks, Reuters reported Friday. The finding adds to a growing body of research on how AI tools are being incorporated into cyber operations against financial institutions.
Security researchers across the industry have spent the past two years warning that AI agents, which can be directed to carry out multi-step tasks with limited human supervision, could lower the skill and time required to probe networks, draft convincing phishing material, or sift through stolen data. Financial institutions have been a frequent focus of such research because of the sensitive data and funds they hold.
Banks in South Korea, like financial institutions elsewhere in Asia, have invested heavily in cyber defenses in recent years as digital banking and cross-border financial links have expanded. Details of the scope, timing and success of the reported campaign were not fully disclosed in the initial reporting.
The disclosure comes amid broader global discussion this week about the security implications of AI agents, following separate reporting on how AI language models have been used in attempts to influence public discussion through planted articles in other contexts. Governments and private security firms are increasingly treating AI-enabled intrusion attempts as a distinct category requiring new detection methods.
Expect further detail from CrowdStrike and South Korean financial regulators on the scope of the campaign and any required disclosures to affected customers.
What is an AI agent in a cybersecurity context?
It generally refers to an AI system that can be given a goal and then carry out a sequence of tasks on its own, such as probing a network or drafting messages, with limited step by step human direction.
Has South Korea confirmed the hack?
The initial reporting attributes the finding to CrowdStrike's research; official confirmation from South Korean banks or regulators was not detailed in the reporting available.