Nation-state hackers are increasingly leveraging generative AI, particularly Google’s Gemini platform, to enhance cyber operations, according to new findings from Google’s Threat Intelligence Group. Advanced persistent threat (APT) groups from North Korea, China, Iran, and Russia are utilizing Gemini for various stages of attacks, from reconnaissance and vulnerability research to crafting phishing lures and generating malicious code. North Korea’s UNC2970 is noted as a leading user, employing AI for social engineering and cryptocurrency-related exploits. Chinese and Iranian groups have also used AI for technical research and disinformation efforts. While Russian actors showed limited interactions, they may prefer domestic tools. Google’s report emphasizes that AI enhances operational efficiency, making attacks quicker and harder to detect. This rise in AI-assisted cyber threats raises concerns among cybersecurity leaders, stressing the need for updated training and robust defense strategies, as adversaries’ techniques improve with the technology. Regulators are expected to increase scrutiny on AI platforms.
Source link
