Microsoft says a financially motivated hacking group based in Cambodia has been using an AI-powered security-testing framework to attack financial organizations, adding to evidence that tools built for legitimate testing are being used for cybercrime.
For banks and other financial businesses, the warning is about the speed of attacks against exposed systems and stolen accounts. Microsoft says the tools can move through parts of an intrusion quickly, making early detection and protection of internet-facing systems important.
In its Friday research report, Microsoft said the group it tracks as Storm-3358 began using the ARTEX framework against financial-sector organizations in October. Its targets were mainly in Southeast Asia, with a smaller number of large financial organizations elsewhere.
Microsoft said the group combined ARTEX with conventional automated tools to scan internet-connected systems, exploit security flaws and install remote-access malware.
The company also said ARTEX-related attacks more broadly can involve stolen credentials and compromised cloud identities. Its report includes detection guidance and indicators for security teams to investigate.
JBizNews Desk | Redmond, Wash.
© JBizNews.com. All rights reserved. Unauthorized reproduction or redistribution is strictly prohibited.
