North Korean Hackers Use AI to Create Fake Military ID
A recent report reveals that a suspected North Korean hacking group has utilized ChatGPT to produce a fake military ID in an attempt to target individuals in South Korea. Cybersecurity experts from Genians, a South Korean firm, discovered that the attackers crafted a phony draft of a military identification card, aiming to make their phishing attempt more believable.
Instead of including a real ID, the email contained a link to malware designed to extract sensitive information from recipients’ devices. This alarming incident highlights the growing threat posed by cyber-espionage initiatives believed to be backed by North Korea.
The group behind this attack, identified as Kimsuky, has a history of targeting South Koreans for information gathering. According to the U.S. Department of Homeland Security, this group is likely assigned by the North Korean government to conduct worldwide intelligence operations.
This incident is part of a broader trend where cybercriminals are using advanced AI technologies to bolster their hacking strategies. For instance, in a separate case reported in August, North Korean hackers were found to be using the Claude Code tool to create fake identities and work remotely for major U.S. companies.
While OpenAI has not commented on this specific case, their representatives did previously indicate that the company banned accounts suspected of being linked to North Korea. These accounts had attempted to utilize the platform to craft fake resumes and cover letters to recruit individuals for illicit activities.
Experts believe that this trend shows how cybercriminals can now exploit AI for various purposes, including planning attacks and creating detailed phishing schemes. Recent phishing attempts targeted South Korean journalists, researchers, and human rights activists focused on North Korea, utilizing deceptive email addresses that mimicked official military correspondence.
The total number of victims affected by this scheme remains unclear. Genians’ research also revealed that while ChatGPT initially refused to assist in creating the fake ID due to legal restrictions, slight alterations to the prompt allowed the researchers to bypass these limitations.
American officials have long alleged that North Korea employs cyberattacks, cryptocurrency theft, and various IT strategies to gather intelligence and generate funds to support its nuclear ambitions, even as it faces international sanctions.
