- What: North Korean hacking groups are using generative AI to facilitate crypto heists and infiltrate secure environments.
- Impact: Organizations are at risk of crypto theft and unauthorized access to secure environments.
AI Driving Surge in North Korean Crypto Thefts and Job Infiltration Generative AI is being used to facilitate an increase in crypto heists and fraudulent infiltration traced to North Korea. Luke Owain Boult Content Writer Photo credit: DC Studio / Shutterstock.com Generative AI is being used to facilitate an increase in crypto heists and fraudulent infiltration traced to North Korea. Decrypt recently reported that, so far in 2025, North Korean hacking groups have stolen $1.6 billion in cryptocurrencies. Google Cloud’s Cloud Threat Horizons Report also highlights two instances of a North Korean-linked group, UNC4899, infiltrating secure environments after contacting employees on social media. UNC4899 is known to use fraudulent freelance job opportunities in social engineering scams to trick software developers on platforms like LinkedIn and Telegram into executing malware. This then gives attackers access to secure environments, allowing them to withdraw “several millions worth of cryptocurrency.” Meanwhile, there has been a surge in North Korean IT worker infiltrations, with a 220% year-over-year increase in cases of companies hiring DPRK software developers. North Korea is believed to have trained thousands of tech specialists who have been hired remotely after using generative AI to forge synthetic identities. They are also believed to be using AI to mask their appearances, pass technical examinations, and appear more fluent in English. “Laptop farms” have also been used by North Koreans to gain access to remote work opportunities at Fortune 500 companies. In one such case in the United States, Christina Chapman was sentenced to over eight years in a federal prison for operating a laptop farm from her Arizona home. She was found guilty of helping to defraud more than 300 US firms by securing places for North Korean operatives, generating more than $17 million for the regime. The increase in crypto heists and cases of fraud from North Korea shows the importance of vigilance in a fast-evolving tech landscape. Generative AI and synthetic identities put companies at risk of inadvertently breaching sanctions on North Korea, which is believed to use the proceeds to fund its nuclear weapons program. AI Asia Beginner Crypto News North Korea Relevant articles Crypto.com CEO Uses Super Bowl to Launch ai.com Consumer Agentic AI Platform Luke Owain Boult Content Writer Global Security Concerns Follow Viral Popularity of OpenClaw’s Agentic AI Luke Owain Boult Content Writer Amazon’s Ring “Lost Dog” Commercial Sparks Backlash Over AI Surveillance Fears Luke Owain Boult Content Writer US Court Hands Fugitive 20-Year Sentence After Laundering $73M for Crypto Scams Luke Owain Boult Content Writer What is Sumsub anyway? Not everyone loves compliance—but we do. Sumsub helps businesses verify users, prevent fraud, and meet regulatory requirements anywhere in the world, without compromises. From neobanks to mobility apps, we make sure honest users get in, and bad actors stay out.