[Core Summary] According to Reuters, South Korean President Lee Jae-myung publicly stated that AI agents appear to have been used to automate intrusion into the country’s banks. This is the first time South Korean officials have officially acknowledged that AI-driven financial cyberattacks have entered live combat.

[Event Details]

  • Disclosure Source: President Lee Jae-myung made the remarks at the National Cybersecurity Conference, saying the attacks displayed “clear characteristics of AI agents.”
  • Attack Characteristics: Unlike traditional manual operations, AI agents can autonomously perform scanning, vulnerability identification, lateral movement, and data exfiltration steps, with attack speed 5-20 times faster than manual operations.
  • Affected Scope: South Korea’s Financial Supervisory Service preliminary assessment showed at least two major commercial banks’ internal test systems were impacted, but no large-scale customer data breach has occurred yet.
  • Investigation Progress: South Korea’s National Intelligence Service and Korea Internet & Security Agency jointly formed a special investigation team, with AI forensics and model provenance becoming key.
  • International Cooperation: South Korea has requested threat intelligence sharing with US, UK, and EU cybersecurity agencies; some attack characteristics are similar to recent international AI attack patterns.

[Panoramic Analysis] First: South Korea’s official acknowledgment of AI agents being used in bank attacks marks the formal entry of network threats into the “AI-led” stage. AI agents can not only act autonomously but also dynamically adjust strategies based on defensive responses, making traditional rule-based intrusion detection systems (IDS) face failure risks. This will force the global financial industry to reassess its security architecture, making the introduction of AI-native threat detection, behavioral analysis, and zero-trust architecture necessary options. Second: This disclosure will catalyze a “fighting AI with AI” security investment cycle in the financial industry. In the next 12 months, major Asian banks are expected to accelerate deployment of AI security operations centers (SOC), AI threat intelligence platforms, and AI risk scoring systems. Smaller banks face “soaring defense costs” challenges, potentially catalyzing a new market for financial security hosting services—a huge opportunity for leading cloud and security vendors. Third: Attribution and legal accountability for AI agent attacks will face unprecedented complexity. Traditional cyberattacks can be traced through IPs, malicious code, and command-and-control servers, but AI agent attacks may be generated, modularly transformed, and used across multiple models—blurring the provenance chain. International law urgently needs to establish a legal framework for “AI agent weaponization”, otherwise cross-border accountability will fall into a legal vacuum.

Multi-View Comparison

  • South Korean President Lee Jae-myung: “We must elevate AI security to a national strategic level on par with nuclear security.”
  • Governor of Financial Supervisory Service: Will roll out new AI security regulations for financial institutions within three months.
  • Monetary Authority of Singapore (MAS): Coordinating AI security threat intelligence with South Korea, emphasizing cross-border collaboration.
  • Kaspersky Global Research and Analysis Team: Observed a threefold year-over-year increase in AI-driven attack samples globally.
  • China Information Technology Security Evaluation Center: Called for establishing an Asia-Pacific AI security threat intelligence sharing alliance.

Editor: GoodInfo Global News Team