MSTIC In-depth Report RevealedNorth Hacking Reaches ‘Complete Settlement’ Stage 사진 확대 Microsoft (MS) officially diagnosed that major North Korean hacking organizations have already reached the highest level of “complete settlement” by absorbing AI at the fastest rate among global threats.According to an in-depth report released by Microsoft Threat Intelligence (MSTIC) on the 29th (local time), the level of AI introduction by major North Korean hacking organizations being tracked by Microsoft has entered the “Operationalized,” the highest level of four-stage evaluations (beginner → expansion → acceleration → complete settlement). In particular, none of the North Korean hacker groups remained in the “emerging” stage of initial search or experiment.The most threatening change is the actual deployment of “autonomous penetration tools” in which AI plans and executes hacking routes on its own as long as it throws a goal. According to the report, the representative organizations under the North Korean Reconnaissance General Bureau, Onix Slit (domestic name Andariel) and Pearl Slit, introduced the AI framework for open-source penetration tests, ARTEX, into actual cyber operations.Previously, hackers had to sit in front of computers and manually find vulnerabilities in target corporate servers. On the other hand, agent AI such as ATEX analyzes the security flaws of the system on its own, designs the optimal penetration path, and automatically generates and executes penetration codes by entering the Internet address of the attack target. The hacker’s attack speed has shifted from ‘human fingers’ to ‘AI’s high-speed operation’.The speed and volume of cyber bombings targeting South Korea have also changed. In August and September, Andariel sprayed more than 100 customized PDF documents planted with malicious codes targeting domestic public institutions and companies. As a result of MS analysis, it was confirmed that they used AI to print dozens of sophisticated bait documents tailored to the victim’s position and interests in just a few minutes. In other words, the preparation for customized targeted attacks, which took weeks in the past, has changed to mass production in just a few minutes.MS pointed out that North Korean hacking organizations are absorbing the latest AI technology faster than anyone else to bypass the international community’s strong sanctions and earn governance funds. It is analyzed that key organizations such as Jade Slit and Corral Slit have already settled AI like daily tasks in all attack processes, and Andariel and Lazarus have also entered the stage of accelerating attacks.
#
AI capabilities
MSTIC
Intelligence
Operationalized
Emerging
Reconnaissance General Bureau
Click Here For The Original Source.
——————————————————–
