Financial authorities identify 28 IPs used in hacking and share them with financial firms

The financial authorities have shared with financial companies 28 internet protocol (IP) addresses that they have identified as having been used in recent hacking attacks targeting the financial sector. The Financial Supervisory Service and the Financial Security Institute said on the 6th that they had identified a total of 33 IPs used in the attack attempts, and that 28 remained after removing duplicates. Regarding this attack, the IP locations were identified as 12 countries, including the United States, Japan, Hong Kong, Singapore, and Vietnam. However, the authorities explained that it is difficult to determine the attacker’s actual location or nationality based only on the identified countries, as proxy access may have been used. An overseas security company disclosed 52 servers with ‘Artex,’ believed to be an AIbased hacking tool, installed on them, and many of them were analyzed to be concentrated in Los Angeles, United States. Police plan to file the related case under the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. for violation and launch an investigation by forming a dedicated task force.