Bloomberg 报道称一款为授权渗透测试打造的开源 Agent 在数周内成为韩国和日本入侵攻击活动的共用引擎。日本 Ierae 考察的攻击服务器针对约 20 家几乎全部位于日本的公司，其中 9 家属于同一行业；韩国方面，CrowdStrike 将该工具关联到一名疑似中文使用者、以牟利为目的的攻击者，其从 9 月下旬起主要用 DeepSeek v4.1-flash 运行该工具攻击金融企业。
原文引述 Bloomberg 报道，给出同一开源渗透测试 Agent 在日韩两地攻击中的使用细节，可帮助读者了解 AI 工具被滥用的新动向。
Bloomberg: An open-source agent built for authorised penetration testing became the shared engine of breach campaigns in both South Korea and Japan within weeks.
The Japanese attack server Ierae examined targeted about 20 companies almost exclusively in Japan, and 9 of them worked in the same industry.
In South Korea, CrowdStrike tied the tool to a likely Chinese-speaking, financially motivated actor who ran it mainly on DeepSeek v4.1-flash against financial firms from late September.
来源：Rohan Paul · x.com