It had to happen ... South Korea warns of possible AI use in banking hacks as 68,000 people affected - IOL
South Korea is investigating potential AI-driven cyberattacks on its financial sector, affecting over 68,000 people, amid concerns about the increasing sophistication of hacking methods. Picture: JADE GAO / AFP
Artificial intelligence may have been used in a string of cyberattacks targeting South Korea's financial sector, the president said Tuesday as police announced the launch of an investigation.
More than seven financial institutions, including some of South Korea's biggest banks, have reported customer data breaches in the past week.
The ability of AI systems to find previously unknown software vulnerabilities and hack banks, companies or government infrastructure is in the global spotlight as leading labs release ever-more advanced models.
"There are signs that artificial intelligence was used in some hacking attacks, causing considerable concern and anxiety among the public," President Lee Jae Myung told a cabinet meeting on Tuesday.
"We have now reached a point where AI can make (hacking) easy for even those without special skills," he said.
More than 68,000 people have been affected by the hacks, according to the Financial Services Commission.
"With advances in AI technology, hacking methods are becoming increasingly sophisticated, while the scope of the damage is spreading across all areas on a scale that is difficult to compare with the past," Lee said.
"The government, companies and our society as a whole need to recognise the seriousness of the current situation and remain particularly vigilant."
Police said Tuesday that an investigation had been launched at Lee's urging.
A government official told AFP it was "highly likely" that Artex AI, an open-source security testing tool believed to be a Chinese AI system, was used in the attacks.
But officials have said that its use does not indicate that the attackers were Chinese.
"Attackers can move between and use IP addresses in multiple locations, so it is impossible to identify an attacker based on an IP address alone," Park Sang-won, head of the Financial Security Institute, told reporters.
An IP address, or internet protocol address, is a unique number assigned to a particular internet connection.
