state-sponsored hacking

State-sponsored hackers are increasingly using AI, including large language models, to enhance cyberattacks. This report details how actors from Iran, North Korea, China, and Russia are weaponizing AI for sophisticated phishing, accelerated malware development, and AI-driven reconnaissance, particularly targeting the defense sector. The analysis also highlights a surge in model extraction attacks, the emergence of AI-integrated malware, and the exploitation of AI chat platforms for malicious campaigns. While AI is transforming the threat landscape, Google emphasizes ongoing efforts to disrupt malicious activity and improve AI model defenses.