North Korean hacking groups are getting a serious boost from AI tools, and the results are alarming. One crew managed to steal as much as $12 million over just three months by leaning heavily on AI assistance.
These hackers are using AI for what security researchers call "vibe coding," essentially letting AI tools help them write malware even if their own coding skills are mediocre. They're also using AI to generate convincing fake company websites that help them pull off social engineering attacks.
This is a perfect example of how AI tools are lowering the barrier to entry for cybercrime. You don't need to be an elite programmer anymore when ChatGPT or similar tools can help you write functional malicious code.
For anyone using AI tools at work, this highlights an uncomfortable reality. The same technology making your team more productive is also making threat actors more dangerous. The playing field is leveling in both directions.
The North Korean angle matters because these aren't just random criminals. These are state-backed operations, meaning the stolen funds likely support the regime. AI is effectively helping a government evade sanctions and fund its operations.
Security teams are now dealing with a higher volume of more sophisticated attacks from adversaries who previously might have lacked the technical chops. The old assumption that mediocre hackers would produce mediocre results no longer holds.
