开源渗透测试智能体成日韩攻击者共用武器
精选理由
安全圈该看看：一个渗透测试智能体被日韩两拨攻击者同时拿去打金融公司，韩国那波还靠 DeepSeek 驱动。
Bloomberg 报道，一个为授权渗透测试设计的开源智能体在数周内被日韩两国的入侵攻击活动共同使用。日本 Ierae 考察的攻击服务器针对约 20 家公司，几乎全部位于日本，其中 9 家属同一行业。在韩国，CrowdStrike 将该工具归因于一个疑似中文使用者、以经济利益为目的的攻击者，其从 9 月底开始主要调用 DeepSeek v4.1-flash 攻击金融企业。
原文 · rohanpaul_ai
Bloomberg: An open-source agent built for authorised penetration testing became the shared engine of breach campaigns in both South Korea and Japan within weeks.
The Japanese attack server Ierae examined targeted about 20 companies almost exclusively in Japan, and 9 of them worked in the same industry.
In South Korea, CrowdStrike tied the tool to a likely Chinese-speaking, financially motivated actor who ran it mainly on DeepSeek v4.1-flash against financial firms from late September.
