首尔/东京，10月9日——在一波攻击之后，韩国和日本公司正竞相加强网络防御，网络安全专家称，这些攻击凸显了人工智能可能降低了技术水平有限的犯罪分子的门槛。
SEOUL/TOKYO, Oct 9 - South Korean and Japanese companies are racing to strengthen cyber defences after a wave of attacks that cybersecurity experts say are highlighting how AI may be lowering the bar for criminals with limited technical skills.
九家韩国银行和两家大型教会正在调查可能涉及人工智能工具的网络攻击，而包括大和证券（8601.T）、软银集团（9434.T）和罗森便利店连锁在内的日本公司也遭遇了近期网络事件的激增。
Nine South Korean banks and two mega-churches are probing cyberattacks that may have involved AI tools, while Japanese companies including Daiwa Securities (8601.T), SoftBank Corp (9434.T) and the Lawson convenience store chain have been hit by a recent surge in cyber incidents.
通过《每日案卷》新闻简报，将最新法律新闻直接送达您的收件箱。
Authorities are still investigating whether and how AI was used in many of the breaches.
当局仍在调查许多泄露事件中是否以及如何使用了人工智能。但网络安全专家表示，这项技术帮助攻击者自动化任务，从扫描软件漏洞到策划网络钓鱼活动，使网络犯罪更快、更便宜且更难检测。
But cybersecurity specialists say the technology is helping attackers automate tasks from scanning for software vulnerabilities to crafting phishing campaigns, making cybercrime faster, cheaper and harder to detect. "AI doesn't get tired...
“人工智能不会疲倦……我认为日本基本上正受到‘地毯式轰炸’，”东京网络安全公司S&J Corp总裁三和信夫说。
My view is that Japan is essentially being subjected to carpet bombing," said Nobuo Miwa, president of Tokyo-based cybersecurity firm S&J Corp.
根据TrendAI的数据，日本今年前九个月的网络安全事件数量超过了去年全年。9月份事件数升至86起，比8月份增长约18%，比7月份增长37%。
Japan recorded more cybersecurity incidents in the first nine months of the year than in all of last year, according to data from TrendAI. Incidents rose to 86 in September, up about 18% from August and 37% from July.
三和表示，这一增长表明攻击者在“努力、动机和技术能力”上已跨过了一个阈值，而人工智能基本消除了语言等曾经阻碍外国黑客的障碍。
The rise suggests attackers have crossed a threshold in "effort, motivation and technical capability," while AI has largely erased language and other barriers that once hindered foreign hackers, Miwa said.
美国网络安全公司CrowdStrike称，涉嫌韩国银行事件的26岁中国攻击者如果没有人工智能的帮助，可能无法实施这场攻击。
US cybersecurity company CrowdStrike said a suspected 26-year-old China-based attacker behind the South Korean bank incidents would probably not have been able to carry out the campaign without AI assistance.
该公司评估认为，这名个人的动机是获取经济利益，他使用了中国研发的人工智能代理和Anthropic的Claude Code。
The individual, whom CrowdStrike assessed was pursuing financial gain, used a Chinese-developed AI agent and Anthropic's Claude Code, according to the company.
“虽然（黑客的）技术能力算不上特别高超，但确实发挥了作用，”CrowdStrike公司负责对抗恶意行为行动的高级副总裁亚当·迈尔斯说道。
"While (the hacker's) capabilities were not terribly sophisticated they were effective," said Adam Meyers, CrowdStrike's senior vice president of counter adversary operations.
首尔附近嘉泉大学人工智能、数据与政策中心主任崔京镇指出，借助人工智能工具，攻击行为愈发难以被察觉，防御方识别可疑行为的难度也随之增加。
HARD-TO-DETECT ATTACKS AI-powered tools are also making it harder for defenders to spot suspicious behaviour, said Choi Kyoungjin, director of the Center for AI, Data and Policy at Gachon University near Seoul.
“借助通用型人工智能模型，即便是怀有恶意的普通用户也能指示系统去搜寻系统漏洞，而系统会替他们完成大部分工作，”他解释道。
"With general-purpose AI models, even ordinary users with malicious intent can ask the system to look for vulnerabilities and it will do much of that work for them," he said.
根据韩国政府数据，今年上半年该国共报告了1,236起网络事件，较去年同期增长20%。尽管服务器遭入侵的案例有所减少，但分布式拒绝服务（DDoS）攻击与勒索软件相关事件的报告数量分别上升了56.7%与76.8%。
South Korea reported 1,236 cyber incidents in the first half of the year, up 20% from a year earlier. While server hacking cases fell, reports of distributed denial-of-service (DDoS) attacks and ransomware rose 56.7% and 76.8% respectively, according to government data.
迈尔斯表示，韩国多家银行遭遇攻击的事件凸显出随着人工智能技术不断发展，加强安全管控措施与开展更严格的测试十分必要。“可以说，人工智能这把‘魔盒’已经打开。”惠誉集团高级分析师吴凯伦在报告中写道，尽管目前这些安全漏洞尚未造成实质性的经济损失，但若被盗取的数据被用于网络钓鱼或类似的短信诈骗活动，风险或将随之升高。
The South Korean bank incidents underscored the need for stronger security controls and more rigorous testing as AI evolves, Meyers said. "The genie is out of the bottle, so to speak." Although the breaches have not yet resulted in material financial losses, risks could increase if stolen data is used in phishing or similar text-message "smishing" campaigns, Karen Wu, senior analyst at Fitch, wrote in a note.
“我们预计这些事件将引发监管处罚、客户赔偿支出，并促使整个行业加大网络安全投入，”吴凯伦说道。
"We expect the incidents to result in regulatory penalties, customer compensation costs, and a sector-wide increase in cybersecurity spending," Wu said.
防御技术同样需要实现突破。如今，关于人工智能在网络犯罪中作用日益凸显的警示声越来越多地来自技术开发者本身。
DEFENCES NEED THEIR OWN BREAKTHROUGH Warnings about AI's growing role in cybercrime are increasingly coming from the technology's developers.
Alphabet旗下谷歌与Anthropic均发出警告称，借助人工智能实施的攻击在全球范围内正变得愈发普遍。
Alphabet's (GOOGL.O) Google and Anthropic have both warned that AI-assisted attacks are becoming more common globally.
“目前我们可以认定，所有恶意行为者都在某种程度上运用了人工智能技术，且他们的攻击行动也因此获益，”谷歌威胁情报小组首席分析师约翰·赫尔特奎斯特上月说道。目前，日本与韩国的监管机构已开始采取应对措施。
“At this point, we can assume that all threat actors are using AI in some capacity and their operations have benefited,” John Hultquist, the chief analyst at Google’s Threat Intelligence Group, said last month. Regulators in Japan and South Korea have begun responding.
韩国金融服务委员会已要求金融业协会、监管机构及受影响的管理人员完成一项包含12项要点的网络安全自我评估。
South Korea's Financial Services Commission has directed financial industry associations, regulators and affected executives to complete a 12-point cybersecurity self-assessment.
在日本，数字转型大臣古川敏治于周四召集各部委和机构召开会议，以应对近期发生的网络攻击。国家网络安全办公室计划向企业发布警告。S&J公司的三和表示，他预计网络攻击的高发态势还将持续。
In Japan, digital transformation minister Toshiharu Furukawa convened a meeting of ministries and agencies on Thursday following the recent attacks. The National Cybersecurity Office plans to issue warnings to businesses. S&J's Miwa said he expected elevated levels of cyberattacks to persist.
他说：“攻击者取得了一项突破，这使得许多旧有的假设变得过时。”“我们的防御体系也需要实现自身的突破。”
"The attackers have experienced a breakthrough that has rendered many of the old assumptions obsolete," he said. "Our defences need their own breakthrough as well."
另有首尔的Maggie Grether和Joyce Lee、东京的Chang-ran Kim以及华盛顿的Raphael Satter参与报道；Brenda Goh负责撰写；Sam Nussey、Miyoung Kim和Jamie Freed负责编辑。
Additional reporting by Maggie Grether and Joyce Lee in Seoul, Chang-ran Kim in Tokyo and Raphael Satter in Washington; Writing by Brenda Goh; Editing by Sam Nussey, Miyoung Kim and Jamie Freed