北, AI로 한국 겨냥 피싱 문서 100개 제작...작년 군기관 사칭 이어 또 한국 겨냥
2026-10-30
Chosun.com
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
North Korean hacking groups have integrated AI into their cyberattack operations, rapidly generating phishing documents, fake recruitment offers, and malware targeting South Korean users. Microsoft reports these AI-driven attacks have increased in speed and scale, causing harm through deception, fraud, and security breaches.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly states that AI was used to create phishing documents targeting South Korean users and to develop malicious code insertion techniques, which are forms of cyberattacks causing harm to individuals and organizations (harm to people and property). The AI systems' use in these attacks directly contributes to realized or ongoing harm, meeting the criteria for an AI Incident. The presence of AI is reasonably inferred from the rapid generation of tailored phishing documents and AI-based development tools for malware insertion. Although some details about actual damage are not fully confirmed, the ongoing use and past incidents confirm realized harm. Hence, this is not merely a potential hazard or complementary information but an AI Incident.[AI generated]