Rohan Paul (@rohanpaul_ai) · 10/20/2026, 19:19:37
Open-Source Pen-Test Agent Weaponized in Japan and Korea Breaches
An open-source AI agent designed for authorized penetration testing became the shared engine behind breach campaigns in Japan and South Korea within weeks. CrowdStrike linked the tool to a likely Chinese-speaking, financially motivated actor who primarily ran it on DeepSeek v4.1-flash against financial firms in South Korea. This incident highlights the risks of weaponizing open-source security tools and emerging supply chain vulnerabilities.
SOURCE COVERAGEFull Original Report
Rohan Paul (@rohanpaul_ai) · 2026-10-20 11
Bloomberg: An open-source agent built for authorised penetration testing became the shared engine of breach campaigns in both South Korea and Japan within weeks.
The Japanese attack server Ierae examined targeted about 20 companies almost exclusively in Japan, and 9 of them worked in the same industry.
In South Korea, CrowdStrike tied the tool to a likely Chinese-speaking, financially motivated actor who ran it mainly on DeepSeek v4.1-flash against financial firms from late September.
