Back Gbhackers

UNC1069 Targets Financial Firms With New Tools and AI

Gbhackers •Mayura Kathir • February 10, 2026

North Korean threat actor UNC1069 has escalated attacks against the cryptocurrency and decentralized finance (DeFi) sector using sophisticated AI-powered social engineering tactics and seven distinct malware families, according to a recent Mandiant investigation. The financially motivated group, active since 2018, deployed an unprecedented arsenal of tools, including newly discovered malware dubbed SILENCELIFT, DEEPBREATH, and CHROMEPUSH, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Hackers Use AI Deepfakes in Crypto Attacks Google's Mandiant security team reported that North Korean hackers, identified as UNC1069 or 'CryptoCore', are employing AI-generated deepfakes in fraudulent video meetings to target cryptocurrency companies. The investigation revealed a recent intrusion at a fintech firm linked to these sophisticated tactics, which included using a compromised Telegram account for the attack. 20 sources 30

Extracted Entities

UNC1069 Targets Financial Firms With New Tools and AI

The full story

Extracted Entities

APT Groups (3)

Attack Types (1)

Industries (1)

Malware (1)