A new report by Google Threat Intelligence Group reveals over 57 threat actors connected to China, Iran, North Korea, and Russia are using Google's AI, Gemini. They have reported productivity gains but have not yet innovated new cyber capabilities. Iranian group APT42 has been highlighted as a primary user, utilizing the technology for phishing attacks and reconnaissance on defense entities. Their activities have targeted NGOs, media, academia, and military systems, indicating a sustained effort to enhance their cyber operations through AI.
Threat actors are experimenting with Gemini to enable their operations, finding productivity gains but not yet developing novel capabilities.
APT42, which accounted for more than 30% of Gemini use by hackers from the country, leveraged its tools for crafting phishing campaigns.
Collection
[
|
...
]