Microsoft Reveals North Korean Hackers Integrate AI Into Their Entire Attack Workflow

Odaily Planet Daily reports that Microsoft’s Threat Intelligence team has disclosed that North Korean hacker groups have been rated as having a “high” level of AI adoption; Jade Sleet, Coral Sleet, and Jasper Sleet have integrated AI into all of their operational processes. These attacks typically target cryptocurrencies and other assets. Jade Sleet launched phishing campaigns centered on job recruitment through three shell companies within a single week; Onyx Sleet created over 100 customized PDF bait files between August and September. Coral Sleet is suspected of using an AI-powered platform to implant malware into private GitHub code repositories. Since late October, Onyx Sleet and Pearl Sleet have begun using the open-source AI agent-based penetration testing framework ARTEX. Microsoft assesses that these operations remain human-led and have not yet achieved full autonomy.