Google's Mandiant team found that the North Korean hacking group UNC1069 is using AI-generated deepfake technology to conduct complex social engineering attacks. According to NS3, the group is attacking by impersonating trusted individuals in fake video conferences, leading to malware infections aimed at stealing credentials and cryptocurrency. As North Korean hackers increase their theft activities related to cryptocurrency, they are shifting from widespread phishing activities to more targeted and high-value attacks.