Google's Mandiant team has uncovered a North Korean hacking group employing AI-generated deepfakes in advanced social engineering attacks targeting cryptocurrency companies. According to NS3.AI, the group, identified as UNC1069, uses AI to impersonate trusted individuals during fraudulent video meetings. This tactic results in malware infections aimed at stealing credentials and cryptocurrency. This development occurs as North Korean actors increasingly focus on targeted, high-value attacks instead of broad phishing campaigns, contributing to a rise in cryptocurrency thefts.