South Korean police have apprehended a 32-year-old man who used generative artificial intelligence to orchestrate a large-scale series of cyberattacks, stealing millions of records containing personal data. Interestingly, artificial intelligence also played a key role in helping law enforcement track down and arrest the hacker.
According to South Korean authorities on October 26, the systems of approximately 90 organizations were compromised, with about 8.2 million personal data records stolen. While seven individuals are implicated in the case, the technical execution of the hacks was carried out by a single person—the alleged mastermind of the criminal group. The other six assisted with extortion and various other operational tasks.
A notable aspect of the case is that the suspect lacked formal education in information technology. He taught himself hacking techniques using resources found online. That said, he was not a complete novice; he had previously spent about three years working for an information security firm, where he gained practical experience in testing the security of websites.
Initially, the suspect relied on standard hacking tools and carried out attacks largely by hand. Later, however, he began utilizing generative AI and automated vulnerability-scanning tools. This allowed him to drastically increase the frequency of his attacks—police report that he managed to breach approximately 60 organizations in just 44 days.
The criminal group used the stolen data to pressure the affected organizations. In total, they issued extortion demands to 38 entities, seeking a combined sum of roughly 360 million won. Ultimately, however, they only managed to extract 300,000 won from a single small firm. Interestingly, artificial intelligence also played a role in solving the crime. South Korean police utilized their own AI tools to analyze a vast dataset, which helped identify the suspects.
The case drew attention primarily because it demonstrated how modern technology can alter the scale of cybercrime. While carrying out a large number of attacks previously required significant technical resources and a team of trained specialists, a single individual with the right skills—leveraging AI tools—can now automate a substantial portion of the work and target dozens of organizations in a relatively short amount of time.
About the Author
