AI has been embedded into the entire operational workflows of three North Korean hacking groups, and related attacks typically target cryptocurrencies and other assets

Odaily reports: Microsoft's threat intelligence team has disclosed that North Korean hacking groups have been rated "high" overall for AI adoption. Jade Sleet, Coral Sleet, and Jasper Sleet have embedded AI into all of their operational workflows; related attacks typically target cryptocurrencies and other assets. Jade Sleet launched recruitment-themed attacks through three front companies within one week; Onyx Sleet produced more than 100 customized PDF lure files from August to September. Coral Sleet is suspected of using an AI development platform to implant Trojans into private GitHub code repositories; starting in late October, Onyx Sleet and Pearl Sleet began using the open-source agentic AI penetration testing framework ARTEX. Microsoft assesses that the related operations are still human-led and not yet fully autonomous.