rohanpaul_ai· @rohanpaul_ai · X·· 4 小时前AI 评分
开源渗透测试智能体被复用于日韩攻击活动
据 Bloomberg 报道，一个为授权渗透测试构建的开源智能体在数周内成为韩国和日本攻击活动的共同引擎。日本安全机构 Ierae 检查的攻击服务器针对约 20 家公司，几乎全部在日本，其中 9 家属于同一行业。在韩国，CrowdStrike 将该工具与一个疑似中文背景、以牟利为动机的攻击者关联，该攻击者自 9 月下旬起主要在 DeepSeek v4.1-flash 上运行它，攻击目标为金融公司。
Bloomberg: An open-source agent built for authorised penetration testing became the shared engine of breach campaigns in both South Korea and Japan within weeks.
The Japanese attack server Ierae examined targeted about 20 companies almost exclusively in Japan, and 9 of them worked in the same industry.
In South Korea, CrowdStrike tied the tool to a likely Chinese-speaking, financially motivated actor who ran it mainly on DeepSeek v4.1-flash against financial firms from late September.
来源：rohanpaul_ai · x.com