North Korea's Kimsuky Group Reportedly Uses AI-Generated Military ID Deepfakes in Phishing Campaign
Date: 2025-07-17
Affected: Apt43, Black Banshee, Emerald Sleet, Government Of North Korea, Group 0094, Kimsuky Group, Openai, Reconnaissance General Bureau, Thallium, Velvet Chollima
Attack vector: deepfake
Category: real-world
Severity: Critical

AI Incident Database (AIID) entry #1208: North Korea's Kimsuky Group Reportedly Uses AI-Generated Military ID Deepfakes in Phishing Campaign. Alleged deployer/developer: Apt43, Black Banshee, Emerald Sleet, Government Of North Korea, Group 0094, Kimsuky Group, Openai, Reconnaissance General Bureau, Thallium, Velvet Chollima. See the linked AIID entry for full narrative, sourcing, and classification.


Mitigations:

Architectural layers (MAESTRO):