MS "中해커, 韓은행 공격 쓰인 AI도구로 전세계 수백곳 침해"
2026-10-22
연합뉴스
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A Chinese-linked hacking group used the AI-based tool 'Artex' to automate cyberattacks targeting hundreds of organizations worldwide, including US IT firm ConnectWise and over 16 Korean financial institutions. The AI system enabled rapid, autonomous data breaches and unauthorized access, resulting in significant privacy and security harms.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves the use of an AI system ('Artex') in the malicious cyberattack campaign that caused actual data breaches and unauthorized access to sensitive information, including in South Korean financial institutions. This constitutes a violation of rights (privacy and data protection) and harm to communities and property (data and organizational security). The AI system's use was pivotal in automating and enabling the attack, thus directly leading to realized harm. Therefore, this qualifies as an AI Incident under the OECD framework.[AI generated]