Microsoft: AI is now routine for three North Korean hacking groups, from 100-lure phishing runs to agentic pen-test tools

Microsoft Threat Intelligence says AI is now built into the everyday work of North Korea's state hackers. In a report published October 29, it ranks eight North Korean groups on a four-stage adoption scale and puts three of them — Jade Sleet, Coral Sleet and Jasper Sleet — at the top, where AI is part of routine workflows. Its overall verdict is that AI adoption across North Korean threat actors is high.

Why it matters: the report doesn't describe new superweapons. It describes the same attacks defenders already know — fake recruiters, phishing, trojanized code, fraudulent remote hires — produced faster, in more languages, and in larger volume. Microsoft stresses that the operations "remain human-directed and have not become fully autonomous." The practical effect is that the cheap signals defenders relied on, such as clumsy English or one reused lure, are disappearing.

Who is where on Microsoft's scale

The concrete techniques

Phishing at volume. Microsoft found more than 100 PDF lures with target-specific details that Onyx Sleet created in August and September 2026, aimed at South Korean users. Dozens appeared within minutes of each other, which Microsoft says is very likely AI output. Its concern is that lures this cheap to regenerate are harder to block and disrupt.

Fake companies and recruiters. Between June 8 and 12, 2026, Jade Sleet ran job-themed outreach through three front companies in one week, one of them dressed up as a blockchain intelligence firm with an AI pitch. SBS reports the fake offers targeted people in AI, blockchain and cybersecurity. Diamond Sleet built fake communications-technology companies, with websites and personas, to approach telecom firms as a business partner, and since August has returned to targeting oil and gas for the first time since 2023, Microsoft says.

AI-assisted malware development. Microsoft names the AI coding platform Cursor as one tool used by Jade, Coral, Pearl and Sapphire Sleet to write, convert, debug and refactor code, including persistence and obfuscation. Coral Sleet has, since April 2026, run a workflow for trojanizing private GitHub repositories and folding them into its malware chain; Microsoft thinks an AI development platform likely gave it that scale. Sapphire Sleet's August 2026 campaign against Rust developers likely used AI too, and compiled .NET code on the fly after compromise, probably to evade defenses. Microsoft also says AI lets these groups retool quickly after defenders block them.

Agentic tooling. Since late October 2026, Onyx Sleet and Pearl Sleet have used ARTEX, an open-source agentic AI penetration-testing framework, according to Microsoft. SBS identifies Onyx Sleet as the group South Korea calls Andariel.

Fake IT workers. Jasper Sleet, the group behind fraudulent remote-employment schemes, likely uses generative and agentic AI in its resume workflows, Microsoft says, plus AI tooling to keep communication and work quality consistent across many fake personas. Across groups, Microsoft lists AI-generated resumes, interview answers, help with coding tests, and altered images, video, voice and backgrounds.

What defenders should take from it

Microsoft's guidance, minus the product upsell, comes down to a few habits:

• Vet remote hires harder. Check for duplicate or near-identical candidate profiles and shared phone numbers, verify references by phone or video, and check whether the same person is employed elsewhere. Microsoft says to require consistent on-camera presence and to treat recurring camera or microphone "problems" as a red flag. Look for a real footprint: a non-VoIP number, a residential address, established social accounts. Take particular care with hires that come through staffing firms.
• Stop trusting polish. Train staff on unsolicited recruiter and investor approaches. Lures will now be fluent and personalized. Microsoft recommends phishing simulations (including over Teams), zero-hour auto purge of malicious mail after delivery, and Safe Links and Safe Attachments in Defender for Office 365.
• Close token-theft paths. Microsoft advises blocking device code flow where possible, or restricting it with Conditional Access.
• Harden endpoints for AI-churned malware. Turn on real-time and cloud-delivered antivirus protection and EDR in block mode, plus attack surface reduction rules that block obfuscated scripts, executables from email, and low-prevalence executables.
• Shrink the perimeter. Keep web-facing systems behind a VPN, WAF or reverse proxy and automate patching.
• Developers: be wary of code from strangers. This one is our reading of the report rather than a Microsoft bullet: malicious repositories, job-themed "coding tests" and targeting of Rust developers all point at engineers' machines as a way in.

Microsoft customers can find matching detections for each named group and a threat analytics report in the Defender portal.

What to watch

The ARTEX detail is the one to follow. Until now, most reporting on state hackers and AI has described chatbots used as writing and coding assistants. An agentic framework used in live operations is a step toward automating parts of the attack itself, even if Microsoft says humans are still in charge.