Microsoft says three North Korean hacking groups have integrated generative AI across their operations. From fake recruiters and AI-generated identities to malicious software and cryptocurrency theft, the development reveals how artificial intelligence is changing the economics of state-sponsored cybercrime.
North Korea’s cyber operations are entering a new phase, and artificial intelligence is becoming one of their most important tools.
Three North Korean state-backed hacking groups have reached what Microsoft calls the highest stage of AI adoption, integrating generative AI into their routine operational workflows. The groups — Jade Sleet, Coral Sleet and Jasper Sleet — are no longer simply experimenting with AI. They are using it across multiple stages of their activities, including researching targets, creating convincing identities, developing malicious software and managing deceptive online operations.
Microsoft Threat Intelligence disclosed the findings in a report published on October 29, 2026. Its assessment comes at an especially alarming moment: on the same day, an attacker transferred approximately $6.36 billion from cryptocurrency exchange Binance wallets across ten blockchains in what could become the largest cryptocurrency theft on record.
Blockchain intelligence firm TRM Labs attributed the Binance incident with high confidence to TraderTraitor, a North Korean hacking unit. Chainalysis also pointed to North Korean involvement, although Binance has not publicly confirmed the identity of the attackers.
There is no established evidence that AI was responsible for the Binance theft. But the timing highlights two connected developments: North Korea’s established ability to conduct enormous financial cyberattacks and its growing use of AI to make cyber operations faster, more scalable and potentially harder to detect.
The bigger concern is not that hackers have suddenly become autonomous. It is that AI is making experienced cyber operators more productive while lowering the effort required to run sophisticated campaigns.
Table of Contents
Three North Korean hacking groups have reached Microsoft’s highest AI adoption level
Microsoft assessed eight North Korean threat groups using a four-stage framework designed to measure how extensively they have incorporated artificial intelligence into their operations.
Three groups reached the highest category, called “operationalized.”
- Jade Sleet: AI is integrated into routine operational workflows, including target research and deceptive recruitment campaigns.
- Coral Sleet: AI-assisted development is helping the group build capabilities to compromise private software repositories.
- Jasper Sleet: AI is being used to create convincing fake identities, résumés and other materials for fraudulent remote employment operations.
Four other groups — Diamond Sleet, Onyx Sleet, Pearl Sleet and Sapphire Sleet — were classified as “accelerating,” meaning their adoption of AI is expanding across multiple operational functions.
Emerald Sleet was placed in the “expanding” category, indicating that its AI use is growing but is not yet embedded across its broader operations.
One detail deserves particular attention: Microsoft did not place any of the eight groups in the lowest “emerging” category.
This suggests that AI adoption is no longer an isolated experiment among the North Korean actors tracked in the report. It is becoming an established part of their cyber capabilities.
However, Microsoft’s classification measures the maturity and breadth of AI adoption. It does not mean that every attack by these groups uses AI or that AI independently makes operational decisions.
How AI is changing the way North Korean hackers attack
The most significant development in Microsoft’s findings is the range of activities in which AI is being used.
Rather than relying on AI for a single purpose, North Korean operators are incorporating it into several connected stages of cyber operations.
1. Fake recruiters are becoming more convincing
Jade Sleet has used AI-assisted research and content generation to conduct recruitment-themed campaigns.
In June 2026, the group posed as recruiters associated with a fake AI-powered blockchain intelligence company. It used industry-specific knowledge and professional-looking online identities to approach potential targets, particularly software engineers.
Microsoft also observed the group launching campaigns through three front companies within a single week.
This matters because recruitment scams exploit something that traditional cybersecurity systems are not designed to identify easily: ordinary professional communication.
A convincing recruiter does not need to send an obvious phishing email. They can initiate a conversation on a professional networking platform, discuss a legitimate-looking job opportunity, schedule an interview and gradually establish trust.
AI makes it easier to research an individual’s professional background and produce messages that appear relevant to their experience.
The target may believe they are speaking to a genuine employer or recruiter when they are actually interacting with an attacker building a route into an organisation.
2. Malicious code is entering private software repositories
Coral Sleet presents a different type of risk.
Since April 2026, Microsoft has observed the group planting malicious code in private GitHub repositories as part of a capability designed to compromise software development environments.
Microsoft assesses that the rapid development and implementation of this capability was highly likely supported by AI-enabled coding tools, potentially including Cursor.
This is particularly concerning because software repositories are not merely collections of code. They can contain proprietary intellectual property, development credentials, internal configurations and access to other systems.
Compromising a private repository can therefore create opportunities that extend beyond the original developer or organisation.
The broader supply-chain risk is that an attacker may use access to a trusted development environment to introduce malicious changes that could affect downstream users or connected systems.
AI-assisted coding can accelerate the development, debugging and adaptation of malicious tools. It can also help attackers modify their techniques when defenders identify and block previous methods.
That does not mean AI automatically produces effective malware. Attackers still need technical knowledge, access, testing and operational decisions. But it can reduce the time and effort required to develop and modify their tools.
3. Fake employees are becoming an increasingly serious security problem
Perhaps the most overlooked part of Microsoft’s report concerns Jasper Sleet.
The group uses AI to create fake professional personas and résumés for schemes in which North Korean IT workers seek legitimate remote employment under false identities.
This is more complicated than conventional phishing.
Instead of tricking an employee into clicking a malicious link, the attacker attempts to become an employee.
A fraudulent applicant may use a fabricated professional history, manipulated identity documents, AI-assisted interview preparation and convincing online profiles to pass recruitment processes.
Once hired, an individual could potentially gain access to internal systems, company data, source code and confidential information.
The FBI has repeatedly warned about this threat. Its October 13, 2026 advisory says North Korean IT workers are increasingly relying on facilitators, stolen identities and intermediaries to obtain remote employment and conceal their involvement.
The FBI also warned that these schemes can involve people in other countries who provide identities, host company-issued laptops or participate in interviews.
The important distinction is that AI does not create this employment-fraud strategy. North Korean operators were already using fraudulent identities and remote employment schemes. AI makes the process easier to scale and maintain.
For employers, this creates a security problem that begins before an employee receives their first company laptop.
More than 100 targeted PDF lures in minutes: AI changes the scale of phishing
Microsoft’s findings about Onyx Sleet provide another indication of how AI can increase the volume of cyber operations.
The company identified more than 100 PDF lure documents attributed to the group, created during August and September 2026.
The documents contained details tailored to South Korean targets. Their metadata indicated that dozens could be generated within minutes, leading Microsoft to assess that AI was very likely involved.
This illustrates a fundamental change in phishing.
Traditional phishing campaigns often depend on reusable templates. Attackers distribute similar messages to large numbers of people and hope that some recipients will respond.
AI allows attackers to move towards a more personalised approach.
Different targets can receive documents adapted to their professional roles, organisations, interests or local circumstances.
This makes generic warning signs less reliable. A malicious document may contain the correct company name, industry terminology and professional context.
Microsoft also identified possible AI-generated voice and video capabilities associated with Emerald Sleet, although it said the full operational impact remains unclear.
The implication is significant: organisations can no longer assume that a professional-looking document, familiar voice or convincing video is sufficient proof of authenticity.
North Korean hackers are experimenting with agentic AI tools
Another development in Microsoft’s report involves ARTEX, an open-source agentic AI penetration-testing framework.
Since late October 2026, Microsoft has observed Onyx Sleet and Pearl Sleet using ARTEX in live operations.
Agentic AI systems differ from conventional generative AI tools because they can perform sequences of tasks with varying degrees of independence, depending on their configuration and permissions.
In cybersecurity, legitimate penetration-testing frameworks are designed to help security professionals assess weaknesses in systems. However, tools designed for security testing can also be misused by malicious operators.
The significance is not that North Korean hackers have developed a completely autonomous cyber army.
Microsoft explicitly states that the observed operations remain human-directed and have not become fully autonomous.
That qualification is important.
Human operators still determine objectives, make decisions and direct activities. AI and agentic tools can assist with research, repetitive tasks, technical workflows and operational analysis.
The potential danger is that a relatively small team could eventually coordinate more activity with fewer manual steps.
The $6.3 billion Binance theft: North Korea’s cybercrime ambitions have a financial dimension
While Microsoft’s report describes the changing methods of North Korean hackers, the Binance incident demonstrates the extraordinary financial scale of the threat attributed to the country’s cyber operators.
On October 29, an attacker moved approximately $6.36 billion from Binance wallets across ten blockchains, according to TRM Labs.
Most of the transfers occurred within approximately 20 minutes.
TRM attributed the incident to TraderTraitor, a North Korean hacking unit, with high confidence based on on-chain and off-chain intelligence.
The attack was considerably larger than the February 2025 Bybit incident, in which approximately $1.5 billion in virtual assets was stolen. The FBI officially attributed that earlier theft to North Korea’s TraderTraitor activity.
TRM’s technical analysis of the Binance incident describes a carefully prepared operation.
Preparation reportedly began at least 36 hours before the transfers. The attacker tested code and rehearsed transactions before deploying the operation against Binance hot-wallet infrastructure.
On Ethereum, TRM identified the use of an EIP-7702 delegation mechanism and pre-signed authorisations. The other affected networks experienced transfers through ordinary signed transactions.
These details suggest that the incident involved more than a simple password theft or an opportunistic attack.
It points towards preparation, access to transaction-signing infrastructure and the ability to execute a coordinated operation across multiple blockchain networks.
TRM reported that approximately $2.7 billion in assets had been frozen through actions by stablecoin issuers and blockchain network authorities. However, it also identified substantial assets that remained beyond issuer-controlled freezing mechanisms.
The figures are evolving as investigators trace the funds.
Importantly, the $6.36 billion figure represents the value of transfers from Binance-attributed wallets to attacker-controlled addresses at the time of transfer. It should not automatically be interpreted as the final unrecovered customer loss.
Binance has said it would cover losses, while the investigation continues.
There is currently no public confirmation that the Binance attack was conducted using the AI workflows described in Microsoft’s report. Connecting the two directly would go beyond the available evidence.
But both developments point towards the growing sophistication and financial importance of North Korea-linked cyber operations.
Why North Korea relies so heavily on cybercrime
North Korea’s cyber strategy is not simply about stealing money for individual criminals.
It operates within a broader state-level system of revenue generation, intelligence collection and strategic operations.
International sanctions have restricted the country’s access to global financial markets and conventional sources of revenue. Cyber operations provide another way to obtain foreign currency and digital assets while operating across international borders.
Microsoft says North Korean threat actors continue to pursue two major objectives: generating revenue for the regime and collecting strategic intelligence. Some operations also involve politically motivated disruption or destruction.
The FBI has separately warned that North Korean remote IT worker schemes generate revenue that supports the country’s government, including its nuclear weapons and other military programmes.
Its October 2026 advisory estimates that the North Korean government receives approximately 85% to 90% of the revenue generated by these workers.
This makes fraudulent employment and cryptocurrency theft two parts of a wider financial threat.
One model involves stealing digital assets directly. Another involves placing workers inside legitimate businesses, collecting salaries and potentially accessing valuable corporate information.
AI can strengthen both approaches without changing their underlying objectives.
It helps attackers do more with the infrastructure, identities and technical resources they already possess.
The hidden danger: AI is lowering the cost of running sophisticated attacks
The biggest implication of Microsoft’s findings may be economic rather than purely technological.
Sophisticated cyber operations traditionally require people with different skills: researchers, developers, social engineers, infrastructure specialists and operators.
AI can assist several of these roles.
A single operator can use AI to research a target, draft tailored communications, create supporting documents, troubleshoot code and organise information gathered during an operation.
This does not eliminate the need for skilled hackers. It changes how efficiently those skills can be deployed.
There are three important consequences.
First, attacks can become more personalised. Instead of relying on generic phishing messages, attackers can produce content that reflects a victim’s professional and organisational background.
Second, campaigns can scale faster. Generating hundreds of tailored documents or maintaining multiple fake identities becomes less labour-intensive.
Third, attackers can adapt more quickly. AI-assisted development may help operators modify tools, troubleshoot failures and respond to defensive measures.
This creates a difficult situation for cybersecurity teams. Blocking one malicious file or domain may not be enough if attackers can rapidly generate replacements.
The challenge is shifting from identifying individual malicious objects to recognising suspicious behaviour across an entire operation.
What companies should do before AI-powered attacks reach them
The response cannot simply be to ban AI tools or assume that every suspicious-looking applicant is a North Korean operative.
Companies need stronger identity verification, better access controls and continuous monitoring.
Several measures are particularly important.
1. Strengthen remote recruitment verification
Employers should verify identities during interviews, onboarding and throughout employment. Video interviews alone are not sufficient because manipulated media and identity fraud can undermine conventional checks.
2. Protect software development environments
Private repositories should use strict access permissions, multifactor authentication, code reviews, secret scanning and monitoring for unexpected changes.
3. Introduce stronger transaction controls
Cryptocurrency exchanges and financial institutions should use independent transaction approvals, hardware-backed signing controls, withdrawal limits and continuous monitoring of privileged access.
4. Monitor behaviour, not just suspicious files
Security teams should look for unusual login patterns, unexpected remote-access software, abnormal data transfers and changes in employee behaviour.
5. Prepare for AI-generated impersonation
Employees should independently verify unusual payment requests, recruiter communications, executive instructions and sensitive access requests through trusted channels.
The FBI’s October advisory recommends an approach it calls “identity in depth”: combining multiple indicators and security controls rather than relying on a single identity check or blacklist.
This is particularly important because legitimate remote employees can exhibit some of the same technical behaviours as fraudulent workers. Effective detection requires context and careful investigation, not indiscriminate suspicion.
AI has not created North Korea’s cyber threat. It has changed its potential scale.
Microsoft’s findings reveal an important transition in the relationship between artificial intelligence and state-sponsored hacking.
North Korea’s cyber operators are not abandoning their established methods. They are improving them.
Recruitment scams remain recruitment scams. Software supply-chain attacks remain software supply-chain attacks. Cryptocurrency theft still depends on compromising access, exploiting weaknesses and moving stolen assets.
What changes is the speed, personalisation and operational capacity that AI can bring to each stage.
The Binance incident and Microsoft’s AI assessment should therefore be understood as separate but related developments, not as evidence that an AI system independently stole billions of dollars.
The more important question is what happens when sophisticated state-backed hacking groups combine years of operational experience with increasingly capable AI systems.
If three groups have already reached Microsoft’s highest level of AI adoption, the next challenge for businesses, financial institutions and governments will be defending against attackers who can research faster, impersonate more convincingly and adapt their techniques at a much greater scale.
The future of cybercrime may not be dominated by machines acting without humans. It may be dominated by human attackers who can use AI to operate at a scale that was previously out of reach.
Frequently Asked Questions
1. Which three North Korean hacking groups have fully adopted AI?
Microsoft identifies Jade Sleet, Coral Sleet and Jasper Sleet as having reached its highest AI adoption stage, called “operationalized.” This means AI has become integrated into their routine operational workflows.
2. Did North Korea use AI to steal $6.3 billion from Binance?
There is currently no public evidence establishing that AI was used in the Binance incident. TRM Labs attributed the October 29, 2026 theft to North Korea’s TraderTraitor unit with high confidence, but the connection between this incident and Microsoft’s AI findings has not been established.
3. What is TraderTraitor?
TraderTraitor is a North Korean cyber threat activity designation used by the FBI for operations involving cryptocurrency theft. The FBI attributed the $1.5 billion Bybit theft in February 2025 to this activity.
4. How are North Korean hackers using generative AI?
Microsoft has identified AI-assisted target research, phishing content, fake professional identities, résumé creation, software development, malicious document generation and operational analysis.
5. What is ARTEX in cybersecurity?
ARTEX is an open-source agentic AI penetration-testing framework. Microsoft says North Korean groups Onyx Sleet and Pearl Sleet have used it in operations since late October 2026.
6. Are North Korean AI-powered cyberattacks fully autonomous?
No. Microsoft specifically says the operations it has observed remain human-directed and have not become fully autonomous.
7. Why does North Korea conduct cryptocurrency theft?
Cryptocurrency theft provides access to financial resources outside conventional banking channels. International authorities have linked North Korean cyber operations and fraudulent IT worker schemes to revenue generation for the regime and its military programmes.
Also Read: