US cyber firm attributes Korean bank breaches to China-linked actor using AI, reviving attribution tropes that obscure Western offensive cyber dominance
Original framing: “CrowdStrike says China-based suspect used AI tools in South Korean bank hacks - Reuters” — Reuters (via Google News)
This follows a documented pattern: the 1950s 'bomber gap' and 'missile gap' (inflated by defense contractors), the 1964 Gulf of Tonkin incident (manufactured pretext), the 2002-2003 Iraqi WMD intelligence (sourced from exiled interests), and CrowdStrike's own 2016 DNC hack attribution (later complicated by VIPS forensic critique). In each case, commercial or ideological actors supplied threat assessments that justified massive state expenditure. The 'AI tools' claim echoes 2017 'NotPetya used AI' headlines later debunked as standard scripting.
The CrowdStrike-Reuters narrative functions as a ritualized threat inflation cycle: a US intelligence-linked firm supplies an unverifiable attribution implicating the designated adversary (China) using the designated novel technology (AI), amplified by a wire service that treats commercial intelligence as public fact.
This serves the cybersecurity-industrial complex's revenue model, the Pentagon's budget justification for AI-enabled cyber forces, and the State Department's 'clean network' alliance architecture — all while erasing Korea's own cyber sovereignty debates, the Global South's rejection of binary alignment, and the technical reality that attribution without infrastructure access is speculation. The historical precedent is not 2016 DNC but 2002 Iraqi WMD: a contractor-shaped narrative (Curveball/Chalabi then, CrowdStrike/Mandiant now) laundering ideological threat assessment as technical finding. The trickster reveals the absurd edge: the 'AI tools' are likely the same open-source frameworks (Cobalt Strike, Sliver) developed by Western researchers, leaked by Western failures (Shadow Brokers), and now sold back as Chinese superweapons. A systemic correction requires breaking the commercial attribution monopoly through an OPCW-style verification treaty, a public threat intelligence commons, and Korean-led regional confidence building that centers actual financial victims over geopolitical theater.