Gbhackers
North Korean Hackers Use AI Deepfakes in Crypto Attacks
First seen 10 Feb 2026, 22:20 UTC
•



+14
•81% similarity
•29.5
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
Google's Mandiant security team reported that North Korean hackers, identified as UNC1069 or 'CryptoCore', are employing AI-generated deepfakes in fraudulent video meetings to target cryptocurrency companies. The investigation revealed a recent intrusion at a fintech firm linked to these sophisticated tactics, which included using a compromised Telegram account for the attack.
ThreatCluster AI
Timeline
2026-02-10
Mandiant report on North Korean malware campaign published
Date unknown
Investigation of intrusion at fintech company initiated
Date unknown
Use of AI deepfakes in attacks confirmed