North Korean Hackers Utilize AI for Enhanced Cyberattacks Targeting Various Sectors
North Korean state-backed hackers, specifically the Kimsuky group, are employing artificial intelligence to enhance their cyberattack capabilities. According to a report by South Korean cybersecurity firm Genians, these hackers have been using AI-generated documents in spear-phishing attacks since 2026. The AI is used to automate the creation of malicious files that appear as legitimate documents, such as research reports and invitations. This development marks a significant shift in cybercrime, as AI allows for the automation and large-scale production of social engineering attacks. North Korean hackers have a history of cyberattacks, including the 2014 Sony Pictures hack. The report highlights the evolving threat landscape, with AI playing a crucial role in both offensive and defensive cybersecurity measures.