Rohan Paul· @rohanpaul_ai · X·· 4 小时前AI 评分73
AI 导读
Bloomberg 报道,一个为授权渗透测试打造的开源智能体在数周内成为韩国和日本多起入侵行动的共同工具。日本 Ierae 考察的攻击服务器针对约 20 家公司,且几乎全部位于日本,其中 9 家属同一行业;在韩国,CrowdStrike 将该工具与一个可能讲中文、以牟利为目的的行为者联系起来,其从 9 月下旬起主要用 DeepSeek v4.1-flash 运行该工具攻击金融机构。
正文 · 原文
Bloomberg: An open-source agent built for authorised penetration testing became the shared engine of breach campaigns in both South Korea and Japan within weeks.
The Japanese attack server Ierae examined targeted about 20 companies almost exclusively in Japan, and 9 of them worked in the same industry.
In South Korea, CrowdStrike tied the tool to a likely Chinese-speaking, financially motivated actor who ran it mainly on DeepSeek v4.1-flash against financial firms from late September.
来源:Rohan Paul · x.com