logo

North Korean APTs Use AI to Enhance IT Worker Scams

ID: b15d4aa8-1d1d-54af-9848-5650c453af7f

STIX ID: report--b15d4aa8-1d1d-54af-9848-5650c453af7f

Feed Name: Dark Reading

Threat Score
72/100

Date Published: 2026-03-06

Date Updated: 2026-04-21

Author: Nate Nelson

...
...

Microsoft researchers observed DPRK-linked clusters (Jasper Sleet and Coral Sleet) operationalizing AI across IT worker fraud: using LLMs to craft résumés and personas, generating convincing identities with face‑swap and voice tools, and employing agentic AI to automate infrastructure, social engineering, and malware-related workflows—enabling scalable insider-access scams and revenue-driven exploitation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.