AI Tools Empower North Korean Hackers to Steal Millions
A North Korean hacking group evaluated AI tools for productivity improvements in their operations. They found AI genuinely useful for writing malware and generating fake company websites; $12 million followed over three months. This is the first documented case of AI delivering measurable ROI within a quarter.
Severity: Unrated · Category: Tool Misuse
Impact: North Korean hacking group stole up to $12 million by misusing AI tools
Source: Wired · Apr 22 2026
How Fencio prevents this
The tools worked exactly as designed. The agent called them with the wrong arguments, at the wrong time, or more often than it should have, and no layer checked whether the call made sense before it ran.
Fencio validates every tool call against expected intent: argument ranges, recipients, amounts, and call frequency. Calls that fall outside expected bounds, repeat without idempotency, or touch identity and money are held for confirmation.