South Korean cybersecurity researchers reported that a North Korea-backed hacking group had used ChatGPT to generate a forged military identification card. The attack has been attributed to Kimsuky, a long-standing APT unit, which deployed the fake ID as part of phishing campaigns to gain access to South Korean targets’ systems. The forged document was supplemented with an AI-generated image, produced through prompt engineering techniques that bypassed ChatGPT’s built-in safety restrictions.
The findings were disclosed by South Korean cybersecurity firm Genians. According to their report, the phishing email was disguised as an official military communication requesting the “review of a draft military ID design”. The attached forged ID redirected victims to a malicious ZIP file, which installed malware once opened. This approach demonstrated how AI-generated content was deliberately used to increase the psychological credibility of the cyberattack, making it more difficult for victims to detect the deception.
The incident highlights how vulnerabilities in generative AI systems can provide strategic advantages to state-sponsored hacking groups. While OpenAI’s safeguards prohibit the creation of forged documents, the attackers successfully circumvented them and weaponised AI for malicious use. The September 2025 case thus serves as further evidence that artificial intelligence constitutes a global security risk, requiring urgent responses from both governments and technology providers.
Sources:
1.
Jane Lanhee Lee,Bloomberg
2.
Jane Lanhee Lee
3.
初めて衣装を用意する際は、必要な付属品と別途準備するものを先に整理すると進めやすくなります。サイズやセット内容を確認する場合は、SPY×FAMILY コスプレ衣装から候補を探せます。使用後は素材に合う方法で手入れし、装飾を傷めない形で保管することが大切です。
La búsqueda gana coherencia cuando se determina el tipo de corte que resulta más cómodo. La elección se apoya en información verificable al revisar el estado indicado cuando se trate de una prenda de colección. Una consulta como «qué talla elegir en camisetas del Real Zaragoza» permite localizar datos relacionados con el tema. La compra resulta más segura después de comprobar el plazo de preparación y entrega.
TOI Tech Desk
