Microsoft and OpenAI have identified five Advanced Persistent Threat (APT) groups that are actively using large language models (LLMs) for malicious purposes. These threat groups, originating from North Korea, China, Iran, and Russia, are using LLMs to automate malicious operations, generate believable phishing content, and gain vulnerability knowledge. While the APT groups were not directly using LLMs to create malware, the discovery highlights the use of generative AI by both white hat and black hat actors for operational efficiency. Microsoft has also identified nine LLM-themed techniques and procedures being used by these threat groups. Experts advise organizations to remain vigilant and adopt application-specific models tailored for specific tasks to defend against generative AI or LLM-based attacks.
Surprising: State-Sponsored APT Groups Utilize Gen AI LLMs
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-37.jpg)
Latest from News
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-38-720x480.jpg)
Black Hat 2024 Cybersecurity Pulse Report – Don’t Miss Out
Cybersecurity Pulse Report Summary TLDR: Key Points Cybersecurity Pulse Report Black Hat 2024 Edition provides expert insights into critical security challenges. AI-driven analysis compiles
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-32-720x480.jpg)
Moody’s: Cyber Insurance Competition Rises, Prices Fall
Moody’s Ratings Article Summary TLDR: Key Points: Cyber insurance market poised for growth as cyberattacks increase. New entrants in the market may lead to
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-78-720x480.png)
Gen Alpha: Cybersecurity meets AI in a digital era
TLDR: Generation Alpha, children of Millennials, are growing up in an AI-native world where AI is an integral part of daily life. Cybersecurity in
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-73-720x480.png)
London transport apps hit as TFL data feeds go offline
Summary of Transport for London cyber-attack article TLDR: Transport for London (TfL) has restricted access to live travel data and customer services due to
![](https://cybersecuritypeek.com/wp-content/uploads/2024/01/cybersecurity-images-89-720x480.png)
August 2024: 36 Cybersecurity M&A Deals Unveiled
“`html TLDR: Key Points: 36 cybersecurity-related M&A deals announced in August 2024 Major deals include Ark-Vantyr, Check Point-Cyberint, Cisco-Robust Intelligence, DigiCert-Vercara, EQT-Acronis Summary: Thirty-six