Home / Technology / AI Empowers North Korean Hackers to Steal Millions
AI Empowers North Korean Hackers to Steal Millions
22 Apr
Summary
- North Korean hackers used AI to conduct crypto theft operations.
- AI tools helped unskilled hackers steal up to $12 million.
- Malware campaigns targeted cryptocurrency and Web3 developers.

A North Korean cybercrime group, identified as HexagonalRodent, has leveraged artificial intelligence tools to conduct sophisticated malware campaigns. These operations successfully targeted developers within the cryptocurrency, NFT, and Web3 sectors. The hackers utilized AI from companies like OpenAI and Cursor to write malware, build fraudulent company websites for phishing, and manage their intrusion campaign, effectively bypassing their own skill limitations.
Expel, a cybersecurity firm, revealed that this AI-enabled hacking spree resulted in credential-stealing malware being installed on over 2,000 computers. The group managed to steal an estimated $12 million in cryptocurrency within a three-month period. Evidence of AI's involvement was found in the code's extensive annotations, emoji usage, and leaked prompts, indicating that AI tools were instrumental in enabling less skilled operators to achieve significant financial gains for the state.