A North Korea-backed hacking group called Kimsuky used ChatGPT to build a fake South Korean military ID and launched a phishing attack targeting journalists, researchers, and human rights workers, according to cybersecurity firm Genians.
The email carrying the deepfake ID contained malware built to steal information from the recipients’ devices. This campaign is part of a wider pattern of North Korean cyber-operations using AI to carry out global espionage.
The phishing email was disguised to look like it came from a real military account, ending in .mil.kr. There was no photo attachment, no image of the ID. Instead, there was a hidden payload ready to infect the target’s system.
Källa: North Korea-linked hackers used ChatGPT to create fake military IDs – Cryptopolitan