Rohan Paul (@rohanpaul_ai) · 2026/10/20 19:19:37
开源渗透测试智能体被用于日韩网络攻击
出处作者 / 发布主体：Rohan Paul (@rohanpaul_ai)原标题：Bloomberg: An open-source agent built for authorised penetration testing became the shared engine of...
68AI 研判分
核心综述
一款专为授权渗透测试设计的开源 AI 智能体在数周内成为日本和韩国多起数据泄露事件的共同引擎。CrowdStrike 指出，该工具在韩国主要运行于 DeepSeek v4.1-flash 模型之上，并被疑似中文背景的金融动机攻击者针对金融机构使用。这一事件凸显了开源安全工具被恶意利用的风险及供应链安全的新挑战。
报道全文原始报道全文
Rohan Paul (@rohanpaul_ai) · 2026-10-20 11
Bloomberg: An open-source agent built for authorised penetration testing became the shared engine of breach campaigns in both South Korea and Japan within weeks.
The Japanese attack server Ierae examined targeted about 20 companies almost exclusively in Japan, and 9 of them worked in the same industry.
In South Korea, CrowdStrike tied the tool to a likely Chinese-speaking, financially motivated actor who ran it mainly on DeepSeek v4.1-flash against financial firms from late September.
