Latest
  1. Visa benchmark finds AI shopping agents fail 42.8% of runs
  2. OpenAI releases GPT-6 Cyber for approved security customers
  3. Google releases Gemini Omni 1.2 Flash with 15-second video clips
  4. Sierra acquires Anon to give its AI agents browser access
  5. Shield AI to buy counter-drone radar maker Echodyne for $5.3 billion
  6. Dropbox agrees to buy Tigris Data for $350m to expand its AI infrastructure
  7. About 600,000 Nvidia H200 chips are stored in Hong Kong awaiting Chinese approval
  8. Anthropic’s compute costs rose to 58% of revenue in Q3, its IPO filing shows

Latest / Media, elections and online safety

ReportMediaDefenceSouth Korea North Korea InternationalConfirmed

North Korean hackers use AI to mass-produce phishing documents targeting South Korean users

See how this story connects

Source: Microsoft Threat IntelligenceAlso reported by Yonhap News Agency

Microsoft Threat Intelligence analysed eight North Korean hacking groups and found they are using AI to increase the speed and scale of cyber attacks. Three groups have integrated AI into routine attack operations, the highest of four adoption stages. One group generated over 100 customised phishing PDF documents in August and September 2026 as part of attacks on South Korean users, producing dozens within minutes.

Why it matters

Microsoft says the groups target cryptocurrency and financial firms, IT companies, software supply chains, governments and education bodies, and that two of them now run attacks with the agentic penetration-testing tool ARTEX.

When
29 Oct 2026
ID
WTA-N-2026-0560
Where
South Korea, North Korea, International
Who
Microsoft

Summary written with AI by wheresthe.ai, from Microsoft Threat Intelligence and the reporting credited above. Checked against the source on 30 Oct 2026.

Read the original at Microsoft Threat Intelligence

Source copy: saved on 30 Oct 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.

Next stop on this Storyline: What happened nextGovernment Linux servers targeted with SysGoRAT and suspected AI-generated scripts

Cite this story

WTA-N-2026-0560: “North Korean hackers use AI to mass-produce phishing documents targeting South Korean users.” wheresthe.ai, 29 Oct 2026. https://wheresthe.ai/d/kr-north-korean-hackers-use-ai-to-mass-produce-phishing-docu-2026-10/ (source: Microsoft Threat Intelligence).

Spotted an error? Email [email protected].