North Korean Hackers Use AI Deepfakes in Crypto Attacks

North Korean Hackers Use AI Deepfakes in Crypto Attacks

First seen 10 Feb 2026, 22:20 UTC CybersecuritynewsGbhackersDecrypt.CoBinanceBleepingcomputer+14 29.5

Article Content

Browse articles
ThreatCluster

Google's Mandiant security team reported that North Korean hackers, identified as UNC1069 or 'CryptoCore', are employing AI-generated deepfakes in fraudulent video meetings to target cryptocurrency companies. The investigation revealed a recent intrusion at a fintech firm linked to these sophisticated tactics, which included using a compromised Telegram account for the attack.

Timeline

2026-02-10
Mandiant report on North Korean malware campaign published
Date unknown
Investigation of intrusion at fintech company initiated
Date unknown
Use of AI deepfakes in attacks confirmed