Rohan Paul· @rohanpaul_ai · X·· 7 小时前AI 评分65
AI 导读
Bloomberg 报道，一个为授权渗透测试构建的开源 Agent 在数周内成为韩国和日本入侵攻击活动的共同工具。日本 Ierae 研究的攻击服务器针对约 20 家几乎全部位于日本的公司，其中 9 家属同一行业；在韩国，CrowdStrike 将该工具与一名可能讲中文、以经济利益为目的的攻击者关联，其从 9 月下旬起主要用 DeepSeek v4.1-flash 针对金融企业运行该工具。
正文 · 原文
Bloomberg: An open-source agent built for authorised penetration testing became the shared engine of breach campaigns in both South Korea and Japan within weeks.
The Japanese attack server Ierae examined targeted about 20 companies almost exclusively in Japan, and 9 of them worked in the same industry.
In South Korea, CrowdStrike tied the tool to a likely Chinese-speaking, financially motivated actor who ran it mainly on DeepSeek v4.1-flash against financial firms from late September.
来源：Rohan Paul · x.com