Alleged State-Sponsored Hackers Escalate Purported Phishing Attacks Using Artificial Intelligence

North Korean cyber criminals, including groups like Kimsuky (Emerald Sleet), are leveraging artificial intelligence tools such as ChatGPT and other large language models to enhance their cybercriminal operations. Microsoft and OpenAI confirmed that North Korean hackers are using AI services to support malicious cyber activities, creating credible-looking recruiter profiles on LinkedIn and other social media platforms to conduct sophisticated phishing campaigns. The hackers use generative AI to improve their English language skills, generate convincing messages, create fake identities and images, and develop more sophisticated malware. One specific case involved targeting a senior engineer at a Japanese cryptocurrency exchange through a fake Singapore recruiter profile that led to spyware infection. South Korea detected over 1.62 million hacking attempts last year, with more than 80 percent traced back to North Korea. The attacks target employees of global defense, cybersecurity, and cryptocurrency companies across platforms including Facebook, WhatsApp, Discord, and Telegram. According to UN experts, money raised from these criminal cyber operations helps fund North Korea's ballistic missile and nuclear weapons programs. Microsoft and OpenAI have disabled all accounts and assets associated with these threat actors.