Security· ★★★· bearish·

Microsoft: three North Korean hacking groups fully integrate AI into attacks

  • —Three of eight DPRK groups reached the highest 'operationalized' AI stage
  • —Kimsuky runs a local LLM and RAG environment, with heavy Cursor usage
  • —One group generated over 100 tailored PDF lures for South Korean users in August–September
  • —TRM Labs attributed the $6.36 billion Binance theft to TraderTraitor
Why it matters: AI lowers the cost and speeds up attack preparation, raising the risk of further large crypto thefts.
Source: ChainCatcher 链捕手
More on this
Security · Oct 24
CYFIRMA: North Korea's Lazarus preparing attacks on South Korean government and banks
 Security · Oct 9
Attackers exploit AhsayCBS flaws to hide XMRig miner as Microsoft Edge
 Security · Oct 22
Microsoft: Storm-0940 AI agents breach cloud environments in under three hours