Google Reports State-Backed Hackers Using Gemini AI for Recon and Attack Support
As different hacker groups continue to weaponize the tool for accelerating various phases of the cyber attack life cycle, enabling information operations, and even conducting model extraction attacks, Google said Thursday that it had seen the North Korea-affiliated threat actor UNC2970 using its generative artificial intelligence (AI) model Gemini to conduct reconnaissance on its targets.
According to a report provided to The Hacker News by Google Threat Intelligence Group (GTIG), the team profiled high-value targets and synthesized OSINT using Gemini to aid in campaign planning and reconnaissance. Target profiling for this actor involved mapping particular technical job roles and compensation information, as well as researching significant cybersecurity and military firms.
This act...