South KoreaPublic sector2026 – ongoingKorean National Police Agency
AI analysis of phishing apps to identify criminal servers
Korean police and SK Telecom identified 475 criminal servers during an AI-assisted pilot
Problem
Phishing apps connected victims to criminal command-and-control servers. Police needed server information quickly enough to intervene before money was transferred.
Approach
Police supplied malicious apps to SK Telecom's internally developed analysis agent. SK Telecom extracted server details and shared them with police alongside information about customers connecting to those servers. The partners formalized the workflow after a 3-month pilot.
Results
Takeaway
The response depended on connecting app analysis to police intervention. The reported financial-loss estimate was not a measured total of prevented transfers.
Categories
- Size
- Large enterprise
- Industry
- Public sector
- Business function
- Production and quality
- Innovation type
- Process innovation
- AI technology
- AI agents
- Adoption
- Partner co-development
- Evidence
- Company's own claim
Sources
Source summaries
The partners reported identifying 475 criminal servers and protecting 643 people during a 3-month pilot. SK Telecom analyzed police-supplied phishing apps and returned server and connected-customer information for intervention.
Full details are in the original sources.