North Korea, which the FBI says was behind the largest crypto theft in history at Binance, is using AI more and more. According to a Microsoft Threat Intelligence report published October 29, of eight North Korean hacker groups examined, three have already fully integrated AI into their attack processes.
What they do with AI
According to reports on the study, the groups likely used AI coding tools such as Cursor to write code, fix bugs and develop techniques that evade defenses. AI agent-based attack tools were also used in real attacks. It is a shift from a previous Microsoft report in March, which said large-scale use of AI agents by attackers had not yet been observed.
The fake employees
One of North Korea's best-known methods is planting fake "IT workers" in Western companies. According to Microsoft, after being hired they use AI tools to write professional responses, answer technical questions and generate code, staying in the job. The money and access they gain serve the regime.
The lesson for Israeli companies
Israeli tech companies, which hire many remote workers and hold sensitive technology, are a natural target. The advice: rigorous identity verification when hiring remotely, and monitoring for unusual behavior in system access. When attackers use AI, defense needs to change too.
