No target organizations are described. Microsoft assesses that these actors mainly use AI to enhance existing techniques.
Attribution
- ARTEX basis
- Microsoft says it has observed this since late October and lists no ARTEX-related IoCs.
- Actor
- Onyx Sleet, Pearl Sleet (North Korean actors, per Microsoft).
- Same attacker?
- Microsoft does not link them to the Korean financial incidents.
Sources (1)
- 2026-10-29 Vendor Microsoft Tracking AI adoption in North Korean threat actor tradecraft