Back Cybersecuritynews

UNC1069 Hackers Attacking Finance Sector with New Tools and AI

Cybersecuritynews •Tushar Subhra Dutta • February 10, 2026

North Korean threat actors, tracked as UNC1069, have intensified their attacks on the cryptocurrency and finance sectors using a sophisticated blend of novel malware and artificial intelligence. Active since at least 2018, this financially motivated group continues to evolve its tradecraft, shifting from standard phishing attempts to highly tailored intrusions targeting software developers and venture […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Hackers Use AI Deepfakes in Crypto Attacks Google's Mandiant security team reported that North Korean hackers, identified as UNC1069 or 'CryptoCore', are employing AI-generated deepfakes in fraudulent video meetings to target cryptocurrency companies. The investigation revealed a recent intrusion at a fintech firm linked to these sophisticated tactics, which included using a compromised Telegram account for the attack. 20 sources 30

Extracted Entities

UNC1069 Hackers Attacking Finance Sector with New Tools and AI

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Industries (1)

MITRE ATT&CK (1)