Google observed North Korea-linked group UNC2970 using Gemini for reconnaissance. The group synthesized OSINT to profile high-value targets—searching info on major cybersecurity and defense companies, mapping technical job roles and salary data. First confirmed case of state-linked actors using commercial AI for targeting intelligence.
North Korea's AI Recon
February 13, 2026
Google observed North Korea-linked group UNC2970 using Gemini for reconnaissance. The group synthesized OSINT to profile high-value targets—searching info on major cybersecurity and defense companies, mapping technical job roles and salary data. First confirmed case of state-linked actors using commercial AI for targeting intelligence.