[Microsoft: North Korean Hackers Use AI to Mass-Generate Phishing Documents; Fake Jobs and Malicious Code Development Already Underway] BlockBeats reported on October 30th, citing Yonhap News Agency, that a Microsoft Threat Intelligence report released on the 29th revealed that North Korean hacker groups are using artificial intelligence to accelerate cyberattacks against South Korean users, expanding from customized phishing documents, fake job postings, and identity spoofing to malicious code development and software supply chain attacks. Microsoft assessed the AI adoption levels of eight North Korean-related hacker groups: three have reached the highest level of "Operational Establishment," integrating AI into their daily attack processes; four are in the "Acceleration" stage; and one is in the "Expansion" stage. The report stated that some organizations generated over 100 customized PDF bait documents targeting different individuals between August and September this year, with instances of dozens being produced in batches within minutes. Between June 8th and 12th this year, there were also cases of using three fake companies to send fake job offers to AI, blockchain, and cybersecurity professionals. Furthermore, Microsoft analysis suggests that North Korean hackers may be using AI programming tools like Cursor to assist in code generation, debugging, and detection evasion. North Korea's Reconnaissance General Bureau's "Onyx Sleet" (referred to as Andariel by South Korea) and "Pearl Sleet" have been using the open-source AI penetration testing framework ARTEX in real-world scenarios since late October. Microsoft believes that while these organizations have leveraged AI to improve attack speed and efficiency, they have not yet reached a fully autonomous attack phase and recommends that companies strengthen job seeker identity verification, phishing prevention, and malware detection. [Original Link]