AIS2023-10.pdf (3 MB)

Kaspersky's presentation on AI use by attackers and defenders places Lazarus among the most significant APT actors observed in 2022 and identifies governments as the top APT targets. It uses Kimsuky Operation GoldDragon and Lazarus Operation DreamJob as case studies in the threat lifecycle, including spear-phishing, collection of system and sensitive information, command-and-control communication, tailored application execution, and social-media targeting of defense contractors and nuclear engineers. The talk then discusses how artificial intelligence could support attacker reconnaissance, tooling, and defender analysis.