South Korea’s AI bank hack probe has expanded after breaches at seven financial companies exposed weaknesses in internet-facing systems. Police opened a formal criminal investigation on October 6 while President Lee Jae Myung ordered authorities to establish the facts quickly and limit further damage.

 

The investigation now centers on three questions:

  • Which vulnerabilities and accounts enabled the intrusions
  • Whether autonomous AI tools accelerated the attacks
  • Who operated the infrastructure across multiple countries

 

South Korea AI Bank Hack Probe Opens

The National Police Agency’s National Office of Investigation assigned four cyberterrorism teams, totaling 28 investigators, to the case. Police booked the matter under South Korea’s Information and Communications Network Act and are also reviewing whether jurisdiction should move to the new Serious Crimes Investigation Agency.

 

Investigators are tracing the internet addresses used in the attacks and coordinating with authorities abroad. The Financial Supervisory Service and Financial Security Institute separately distributed information on 28 unique suspect IP addresses to financial companies, according to Reuters.

 

Lee said at a cabinet meeting that signs of AI use had emerged in some hacking incidents. His wording matters: the government is treating AI involvement as a serious working hypothesis, not as a completed technical finding covering every breach.

 

Authorities have not published the models, prompts, tool logs or forensic sequence needed to show exactly how AI contributed. They also have not attributed the campaign to a country or named an attacker.

 

Seven Financial Firms Reported Intrusions

South Korean financial authorities identified incidents at Shinhan Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank, Yegaram Savings Bank, Welcome Savings Bank and Hyundai Capital. Similar infrastructure and methods across several victims led investigators to examine whether one operator or connected operators were responsible.

 

The exposed systems included auxiliary services used by employees and loan recruiters rather than core online or mobile banking. Authorities said they had not identified disruption to customer banking services or financial losses from the incidents.

 

The technical weaknesses varied. Some services lacked identity checks before returning loan or company-representative information. Other systems had weak device controls or unpatched web vulnerabilities that allowed attackers to install malware and take log files containing customer data.

 

That pattern makes the case broader than a single compromised application. It connects ordinary security gaps—missing authentication, exposed services and delayed patching—with automation capable of testing many targets rapidly.

 

Related Research

 

ARTEX Evidence Does Not Identify the Attackers

Security officials found traces associated with ARTEX AI on infrastructure linked to attacks against the financial sector. ARTEX is an open-source, large-language-model-based penetration-testing framework designed to divide vulnerability discovery, validation, planning and execution among multiple agents.

 

The finding is important because the same features that help authorized red teams test systems can also increase the speed and scale of unauthorized probing. It is not, by itself, proof that ARTEX completed every stage of the intrusions or that every observed instance was malicious.

 

AhnLab’s Security Intelligence Center said it discovered roughly 600 IP addresses worldwide hosting apparent ARTEX instances. The researchers cautioned that these servers may include legitimate security teams, researchers and other users because anyone can deploy the public code.

 

The project’s Chinese-language interface has prompted speculation about the attackers’ origin, but open-source distribution breaks that inference. A tool’s language and hosting location cannot reliably identify the person controlling it, especially when attack traffic crosses servers in many countries.

 

Multi-Factor Authentication Separated Blocks From Breaches

Authorities said other financial firms saw intrusion attempts but avoided compromise when multi-factor authentication and earlier vulnerability fixes were in place. That contrast offers a concrete lesson while the AI forensics remain unresolved: automated attacks still depend on reachable weaknesses.

 

Regulators sent indicators and security guidance to about 500 financial companies. Banks and card issuers were ordered to complete urgent checks by October 6, while securities firms, insurers, savings banks and electronic-finance providers face an October 8 deadline.

 

The checklist covers blocking hostile IP addresses, investigating possible damage and identifying externally exposed IT assets. Financial institutions are also being told to restore missing authentication, restrict staff systems to registered devices and fix or disable vulnerable web services.

 

The unresolved issue is how much autonomy the suspected tools exercised. Police will need to connect server logs, model activity and individual attack steps before South Korea can describe the campaign as a verified autonomous AI operation rather than AI-assisted hacking.

 

Even that narrower possibility is consequential. If open penetration-testing agents helped one operator scan multiple financial institutions in parallel, defenders must shorten the interval between discovering an exposed service and removing it. The case’s lasting significance will depend on the evidence investigators publish, not the nationality suggested by a tool’s interface.