Google observed North Korea-linked group UNC2970 using Gemini for reconnaissance. The group synthesized OSINT to profile high-value targets—searching info on major cybersecurity and defense companies, mapping technical job roles and salary data. First confirmed case of state-linked actors using commercial AI for targeting intelligence.