The suspect behind recent cyberattacks on South Korea’s financial sector may be a 26-year-old based in China’s Guangdong province, U.S. cybersecurity firm CrowdStrike said in a report published Wednesday. CrowdStrike said it uncovered personal details linked to the suspected attacker—including a Telegram account, age, education background, and a location in Maoming—while analyzing AI coding-tool sessions and infrastructure tied to a campaign targeting South Korean financial institutions from late September to early October. The attacker reportedly used ARTEX, a recently released Chinese-developed open-source penetration testing tool, alongside large language models; CrowdStrike assessed with moderate confidence that the actor was a Chinese speaker and likely financially motivated. South Korean authorities are investigating after banks including Shinhan Bank and KB Kookmin Bank reported data breaches.

Full report: Suspect behind South Korea bank hacks may be 26-year-old in China, cybersecurity firm says.