Kimsuky Group Uses AI-Generated Military ID Deepfakes in Phishing

# Kimsuky Group Uses AI-Generated Military ID Deepfakes in Phishing

https://gcdradar.vercel.app/incidents/kimsuky-group-uses-ai-generated-military-id-deepfakes-in-phi · AIR-2025-0090 · closed 2025-07-31

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2025-07-17
- AI role: AI-enabled attack
- Products: Deepfake ID generator

## Summary

A known threat group carried out a targeted phishing campaign using AI-generated deepfake military identification cards. The malicious emails distributed secondary malware payloads disguised as office updates.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-07-17: North Korea's Kimsuky Group Reportedly Uses AI-Generated Military ID Deepfakes in Phishing Campaign (https://incidentdatabase.ai/cite/1208)

## Sources

- 2025-07-17 AI Incident Database: North Korea's Kimsuky Group Reportedly Uses AI-Generated Military ID Deepfakes in Phishing Campaign https://incidentdatabase.ai/cite/1208

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.