Back to Feed
AI SecurityMar 6, 2026

AI as tradecraft: How threat actors operationalize AI

Threat actors are increasingly operationalizing AI to scale malicious activities and accelerate attack tradecraft, creating heightened risks for defenders. Recent activity from North Korean APT groups Jasper Sleet and Coral Sleet (formerly Storm-1877) demonstrates this trend of AI-enabled cyber operations.

Summary

Threat actors are increasingly operationalizing AI to scale malicious activities and accelerate attack tradecraft, creating heightened risks for defenders. Recent activity from North Korean APT groups Jasper Sleet and Coral Sleet (formerly Storm-1877) demonstrates this trend of AI-enabled cyber operations.

Indicators of Compromise

  • mitre_attack — Jasper Sleet
  • mitre_attack — Coral Sleet