Google warns North Korea, Iran, and China are using AI to enhance cyberattacks

A new report from Google’s Threat Analysis Group (GTAG) has shown that state-backed hackers from North Korea, Iran, and China are actively experimenting and optimizing cyberattacks with artificial intelligence (AI) tools, which in this case was Google’s Gemini. Google said it had observed multiple state-affiliated groups using its large language models for reconnaissance, social engineering, malware development, and enhancing “all stages of their operations, from reconnaissance and phishing lure creation to command and control (C2) development and data exfiltration.” The report found evidence of novel and sophisticated AI-enabled attacks. It warned that generative AI is lowering the technical barriers for malicious operations by helping attackers work faster and with greater precision. The report builds on similar warnings from Microsoft and OpenAI , which disclosed comparable experimentation by the same trio of nation-backed actors. Also, Anthropic, the company behind Claude AI, released a report on how it has been detecting and...

https://www.cryptopolitan.com/north-korea-iran-china-groups-ai-malware/