Microsoft Warns: North Korean Hackers Turn to AI-Fueled Cyber Espionage

Microsoft and industry reporting highlights North Korea-linked APTs (Emerald Sleet/Kimusky/TA427, Jade Sleet, Diamond Sleet/Lazarus, Konni) increasingly using AI/LLMs to enhance spear-phishing, reconnaissance, and malware/supply-chain operations; the groups have conducted large cryptocurrency thefts, abused DMARC and web beacons for profiling, and used LNK files, DLL hijacking, and TCC manipulation to evade defenses.