Back Techflowpost

North Korean hackers use AI technology to conduct social engineering attacks against ...

Techflowpost • April 15, 2026

Zerion disclosed that some of its corporate hot wallets were recently targeted by an AI-driven social engineering attack linked to North Korean hackers, resulting in losses of approximately $100,000. Zerion stated that user funds, applications, and infrastructure remain unaffected and proactively disabled its web application to mitigate risk. This incident marks the second such attack this month, following the $280 million breach of Drift Protocol, underscoring how North Korean hackers are leveraging AI to refine social engineering tactics—primarily targeting employees and developers at crypto firms. The Security Alliance (SEAL) tracked the hacker group UNC1069, which conducts low-pressure, multi-week social engineering campaigns across platforms including Telegram, , and Slack, using AI tools to edit images and videos to enhance attack efficiency.

TechFlow reports that on April 15, Zerion disclosed that some of its corporate hot wallets were recently targeted by an AI-driven social engineering attack linked to North Korean hackers, resulting in losses of approximately $100,000. Zerion stated that user funds, applications, and infrastructure remain unaffected, and it has proactively disabled its web application to mitigate risks.

This incident marks the second such attack this month, following the $280 million theft from Drift Protocol. It highlights how North Korean hackers are leveraging AI to refine their social engineering tactics, primarily targeting employees and developers at cryptocurrency companies. The Security Alliance (SEAL) has tracked the associated hacker group UNC1069 conducting low-pressure, multi-week social engineering campaigns across platforms including Telegram, , and Slack, and using AI tools to edit images and videos to enhance attack efficiency.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Hackers Steal $100K from Zerion Using AI Social Engineering Zerion, a DeFi crypto wallet provider, reported a theft of approximately $100,000 from its hot wallets due to an AI-enhanced social engineering attack linked to North Korean hackers. The attack, which targeted employee credentials and logged-in sessions, is the second incident involving DPRK-affiliated hackers this month, following a $285 million breach at Drift Protocol. Zerion confirmed that user funds and infrastructure were not compromised and has since disabled its web application as a precaution. The Security Alliance (SEAL) has been tracking the hacker group UNC1069, which employs multi-week social engineering tactics across platforms like Telegram and Slack. This incident reflects a concerning trend in the sophistication of cyber threats, particularly as AI tools become more prevalent in attack methodologies. Zerion has reported the incident to law enforcement and is reviewing employee devices for vulnerabilities. The attack highlights the evolving nature of cyber threats in the crypto sector, where even smaller firms are not immune to sophisticated tactics. 5 sources 70

Extracted Entities

North Korean hackers use AI technology to conduct social engineering attacks against ...

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Companies (2)

MITRE ATT&CK (1)

Platforms (2)