According to CoinMeta, Microsoft’s Threat Intelligence Team mentioned in a report dated October 29th that North Korean hackers are utilizing generative technology to accelerate phishing attacks, identity impersonation, and the development of malicious software. Among the 8 organizations tracked by Microsoft, jade, sleet, coral, sleet, jasper, and sleet have incorporated this technology into their regular attacks, while another four organizations are accelerating its adoption. The report states that between August and September this year, onyx and sleet created over 100 customized phishing files targeting South Korean users, with dozens of these files generated within minutes. Microsoft believes that these files most likely utilized AI. In addition, jade and sleet conducted recruitment phishing campaigns through three fake companies, posing as AI blockchain intelligence firms to recruit software engineers. These organizations also used AI to study encrypted wallets, exchanges, and DEFI business processes, and may have used cursor and other AI programming tools to assist in the development of malicious software. onyx, sleet, and pearl have used open-source AI penetration testing frameworks in their operations. Microsoft emphasized that AI is currently mainly used to improve attack efficiency, and these activities have not yet achieved full autonomy.