The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
North Korean-affiliated hackers used AI-powered social engineering tactics to compromise Zerion employees, stealing approximately $100,000 from the company's internal crypto wallets. The attack exploited employee credentials and private keys, but did not affect user funds or core infrastructure. Zerion has since strengthened its security measures.[AI generated]
Why's our monitor labelling this an incident or hazard?
The attack involved the use of AI-enabled social engineering, an AI system that generated realistic messages and impersonations to deceive employees and gain access. This directly led to financial harm through theft from Zerion's wallets. The AI system's role was central to the breach, as it enhanced the attackers' ability to infiltrate human defenses. The incident caused realized harm (financial loss) and involved the use of an AI system in the attack, meeting the criteria for an AI Incident rather than a hazard or complementary information.[AI generated]
