새로운 News S를 만나보세요경기·인천 최고의 인터넷 뉴스 · 여러분의 제보가 뉴스가 됩니다

Hacking Crisis Sweeps Entire Financial Sector...Banks Followed by Insurance & Securities Firms 'Infiltrated'

"Attacking AI, defending humans...cyber security emergency spreading to secondary financial institutions""AI hacking changes security paradigm...Government push for full audit of national administrative networks beyond financial sector""Concerns over undefended central and local government computer systems...golden time to expedite security inspections"
[On the 4th, as hacking incidents continue affecting secondary financial institutions including savings banks and capital companies following major banks, ATM corners of Shinhan, KB Kookmin, and Hana banks with leaked personal information are visible at Seoul Express Bus Terminal in Seocho-gu. Newsis]
[On the 4th, as hacking incidents continue affecting secondary financial institutions including savings banks and capital companies following major banks, ATM corners of Shinhan, KB Kookmin, and Hana banks with leaked personal information are visible at Seoul Express Bus Terminal in Seocho-gu. Newsis

Sophisticated hacking attempts exploiting artificial intelligence are spreading across the entire financial sector, extending beyond major banks to secondary financial institutions and insurance and securities firms. This series of hacking incidents, led by advanced AI agents, is raising serious alarm bells not only for private financial companies but also for central and local government computer systems handling vast amounts of administrative data.

Seven financial institutions hit simultaneously...identical IP and AI penetration tool traces detected

According to financial authorities and security experts as of the 5th, recent security breaches have occurred sequentially across a total of seven financial companies, including major banks such as Shinhan, KB Kookmin, Hana, and Busan Bank, as well as secondary financial institutions like Yegaram and Welcome Savings Bank, and Hyundai Capital.

A decisive characteristic distinguishing this incident from previous hacking attacks is the speed and automation of the attacks. According to investigations by authorities and security experts, identical patterns were detected in the attack processes against these financial institutions, in which attackers attempted infiltration by changing countries and IP addresses. In particular, traces of AI-based penetration tools such as 'ARTEX AI (Autonomous Penetration Testing Console)' based on Chinese language were found on some attack servers, prompting investigative authorities to examine potential connections.

Unlike the past when humans manually searched for vulnerabilities, this situation reveals that AI agents rapidly scanned system loopholes and indiscriminately exploited them. Consequently, even the securities and insurance sectors, where direct damage has not yet been confirmed, have launched emergency security inspections and entered a state of heightened alert.

Authorities conduct emergency briefing of entire financial sector..."Must transition security paradigm with AI shield"

Financial authorities are treating the situation with utmost gravity, conducting an emergency briefing of the entire financial sector and instructing comprehensive re-inspection of externally exposed systems. Security experts are in consensus that this incident provides an opportunity to move away from traditional post-incident response and network segmentation-focused security systems.

Under the assessment that "the speed of hacking AI far outpaces human defensive capabilities," the consensus in the financial sector is that the defense system itself must undergo complete upgrades to AI-based real-time detection and blocking systems.

This AI hacking shock that struck the financial sector is not confined to the private sector. National administrative data and sensitive personal information—including resident registration, welfare, and taxation—handled by central government ministries and local governments' computer systems are likewise exposed to similar intelligent threats, experts point out.

Particularly for local governments, concerns have emerged that relatively limited information security budgets and specialized personnel may leave them defenseless against intelligent infiltration attempts using AI. Experts note that government ministries and local governments should also expedite precision diagnostics of their external-linked systems and administrative support solutions to ensure there are no traces of infiltration.

The double-edged sword created by technological evolution has already arrived as a concrete threat. This is the golden time when not only private financial companies must strengthen internal controls, but central and local governments must also expedite rigorous security inspections across their entire administrative computer networks.

Send a news tip to News SYour tip becomes the news · Your identity is protectedSend tip