Police: 'Daily progress in financial institution hacking probe' ... also tracking theory that attacker is a Chinese national

[Financial News] As speculation emerged that the attacker in a recent financial institution hacking incident may be a 26-year-old living in Guangdong Province, China, police are continuing their investigation, using related information as a lead.
Financial News learned on the 8th that police have obtained and are analyzing information about the attacker's identity presented by global cybersecurity firm CrowdStrike.
In a report released on the 7th (local time), CrowdStrike had raised the possibility that the attacker was a 26-year-old living in Guangdong Province, China. It cited as grounds for estimating the attacker's identity the initials entered when the attacker asked the generative AI coding tool Claude Code to write a résumé, as well as a Telegram account, educational background and place of residence.
Since launching the investigation on the 1st, police have been analyzing materials obtained with the cooperation of relevant agencies. They believe that many of the 28 IP addresses linked to the incident were used for so-called 'laundering.'
Police have asked the Financial Services Commission for an authoritative interpretation on whether the compromised systems at the affected financial institution qualify as electronic financial infrastructure. However, police plan to continue the investigation regardless of whether the case is transferred to the Serious Crime Investigation Agency.
A National Police Agency official said, "The investigation is making progress every day, but we are not disclosing specific details because they could help the suspect," adding, "Regardless of whether the case is transferred, we are continuing the necessary investigative work, including gathering and analyzing materials and cooperating internationally."
[email protected] Kim Ye-ji Reporter