Safety & RulesMicrosoft assesses AI adoption by North Korean hacker groups as high
According to Microsoft, two groups use ARTEX, an open-source agentic penetration testing tool.
Source of truthmicrosoft.com/…/tracking-ai-adoption-in…According to a Microsoft Threat Intelligence report (October 29), AI adoption by North Korean threat actors is high. Three groups (Jade, Coral and Jasper Sleet) have built AI into all their operations. Since late October, Onyx Sleet and Pearl Sleet have used ARTEX, an open-source agentic penetration testing tool. Microsoft says AI-assisted development platforms such as Cursor have likely helped Jade, Coral, Pearl and Sapphire Sleet generate, debug and refactor code.
Related stories
Tampered Claude Code extension in Cursor tried hidden SSH access
According to Microsoft, tampered versions of the extension in the Cursor marketplace tried to add an attacker's SSH key to the computer.
Microsoft: Storm-0940 group automated attacks with AI agents
According to Microsoft, Storm-0940, which it assesses as China-state aligned, used the open-source ARTEX framework to automate attacks targeting hundreds of organizations; most of the targeting was not successful.