![Wanted: Suspect for Burglary/Sexual Assault in the 5th District [VIDEO]](https://thephillypi.com/wp-content/uploads/2026/10/PHILADELPHIA-BREAKING-Police-Release-Video-of-Suspect-Wanted-in-5th-330x220.jpg)
SEOUL – The suspect behind recent cyberattacks targeting South Korea’s financial sector may be a 26-year-old based in China’s Guangdong province, U.S. cybersecurity firm CrowdStrike has said.
In a report published on its website on Wednesday, CrowdStrike said it uncovered personal details linked to the suspected attacker while analyzing AI coding-tool sessions and infrastructure associated with a campaign targeting South Korean financial institutions from late September to early October.
CrowdStrike said the attacker used ARTEX, a recently released Chinese-developed open-source penetration testing tool, alongside large language models and assessed with “moderate confidence” that the actor was a Chinese speaker and likely financially motivated.
The firm said one Claude Code session contained a request to create a security researcher resume describing results from the hacking activity.
The prompt included details such as a Telegram account, age, education background and a location in Maoming, Guangdong, the report said.
CrowdStrike said the same Telegram username appeared in other cyber activity, including vulnerability research involving a Telegram-based non-fungible token marketplace and a separate suspected attack on a Chinese payment platform.
EXPLORE MORE
Home Depot Launched a New Husky Laser Distance Tool
I spotted a new Husky laser distance measuring tool on Home Depot’s…
Philadelphia Police Seek Murder Suspect in 15th District Homicide
Philadelphia Police are asking for the public's help to locate a vehicle…
Urgent Warning: Massive Train Disruptions Threaten Philly to NYC Commuters Today
PHILADELPHIA — For anyone planning a trip from the Delaware Valley up…
Revealed: How to Score Massive Newegg Promo Codes and Hardware Discounts in 2026
Welcome back to the hardware desk here at The Philly PI, where…
Rep. Perry Unveils Crucial Farm Bill Updates Amid Heated House Debate
As Capitol Hill navigates a packed legislative calendar, lawmakers are once again…
The company said the personal details likely belonged to the actor responsible for the activity, but cautioned that currently available information could not definitively identify the attacker.
Authorities in Seoul are investigating cyberattacks that affected multiple financial institutions after banks, including Shinhan Bank and KB Kookmin Bank, reported data breaches.
South Korean police, who have launched a probe, did not immediately respond to a request for comment.
South Korean President Lee Jae Myung said on Tuesday that signs had emerged that AI was used in some of the hacking incidents and called for heightened cybersecurity measures.
