← Back ◉ Threat Intelligence —

AI as tradecraft: How threat actors operationalize AI

Microsoft Security Archived Mar 16, 2026 ✓ Full text saved

Threat actors are operationalizing AI to scale and sustain malicious activity, accelerating tradecraft and increasing risk for defenders, as illustrated by recent activity from North Korean groups such as Jasper Sleet and Coral Sleet (formerly Storm-1877). The post AI as tradecraft: How threat actors operationalize AI appeared first on Microsoft Security Blog .

Full text archived locally

✦ AI Summary · Claude Sonnet

November 3, 2025 SesameOp: Novel backdoor uses OpenAI Assistants API for command and control Microsoft Incident Response – Detection and Response Team (DART) researchers uncovered a new backdoor that is notable for its novel use of the OpenAI Assistants Application Programming Interface (API) as a mechanism for command-and-control (C2) communications.

💬 Team Notes