CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

North Korean APTs Leverage AI to Enhance IT Worker Scams

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

North Korean threat actors, specifically clusters Jasper Sleet and Coral Sleet, are using AI to enhance their IT worker scams. These groups employ AI to fabricate identities, maintain digital personas, and socially engineer potential employers. The AI tools help them research job postings, generate fake resumes, and create convincing digital identities. Once employed, they use AI to perform job tasks, generate code snippets, and develop web infrastructure for malicious purposes. The use of AI complicates detection and response efforts, making these scams more effective and harder to detect.

Timeline

  1. 06.03.2026 19:49 1 articles · 8h ago

    North Korean APTs Use AI to Enhance IT Worker Scams

    North Korean threat actors, specifically clusters Jasper Sleet and Coral Sleet, are using AI to enhance their IT worker scams. These groups employ AI to fabricate identities, maintain digital personas, and socially engineer potential employers. The AI tools help them research job postings, generate fake resumes, and create convincing digital identities. Once employed, they use AI to perform job tasks, generate code snippets, and develop web infrastructure for malicious purposes. The use of AI complicates detection and response efforts, making these scams more effective and harder to detect.

    Show sources
    Open in new tab

Information Snippets

  • Jasper Sleet and Coral Sleet use AI to research job postings and generate fake resumes and cover letters.

    First reported: 06.03.2026 19:49
    1 source, 1 article
    Show sources

  • AI tools help create convincing digital personas, including fake names, email addresses, and social media handles.

    First reported: 06.03.2026 19:49
    1 source, 1 article
    Show sources

  • Threat actors use AI to maintain their personas during interviews and daily communication.

    First reported: 06.03.2026 19:49
    1 source, 1 article
    Show sources

  • AI is used to generate code snippets, develop web infrastructure, and automate cyberattack workflows.

    First reported: 06.03.2026 19:49
    1 source, 1 article
    Show sources

  • Organizations are becoming more vigilant, incorporating verification questions during remote interviews.

    First reported: 06.03.2026 19:49
    1 source, 1 article
    Show sources