AI lowers cybercrime barriers as South Korea and Japan face rising attacks
Cyberattacks in South Korea and Japan surged 18% in September, with CrowdStrike attributing the rise to AI tools that simplify hacking for less-skilled criminals. Financial institutions and major corporations are now scrambling to bolster defenses.
South Korean and Japanese companies are racing to strengthen cyber defences after a wave of attacks that cybersecurity experts say are highlighting how AI may be lowering the bar for criminals with limited technical skills. Nine South Korean banks and two mega-churches are probing cyberattacks that may have involved AI tools, while Japanese companies including Daiwa Securities, SoftBank Corp and the Lawson convenience store chain have been hit by a recent surge in cyber incidents.
The rise in attacks has prompted increased scrutiny from authorities and cybersecurity firms. Nobuo Miwa, president of Tokyo, described the situation as Japan being subjected to 'carpet bombing,' while Adam Meyers of CrowdStrike noted that while the hacker's capabilities were not highly sophisticated, they were effective. The use of AI tools has made it easier for cybercriminals to carry out complex attacks with minimal technical expertise.
Incidents rose to 86 in September, up about 18% from August and 37% from July. This follows a broader trend, with South Korea reporting 1,236 cyber incidents in the first half of the year, up 20% from a year earlier. CrowdStrike identified a suspected 26-year-old China-based attacker behind the South Korean bank incidents, who likely could not have executed the campaign without AI assistance.
The increasing reliance on AI in cybercrime has significant consequences for organizations worldwide. It raises costs for cybersecurity measures, increases the risk of vendor lock-in with AI-driven solutions, and complicates governance as companies struggle to keep pace with evolving threats. Market reactions have been swift, with many firms accelerating investments in AI-powered defense systems to mitigate risks.
As AI continues to reshape the cyber threat landscape, the need for robust, adaptive security frameworks has never been more urgent. Companies are now faced with the challenge of balancing innovation with protection, ensuring that AI tools are used to defend rather than exploit. The stakes are high, and the response must be equally comprehensive.