When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.

At present, they primarily use AI for research, troubleshooting code, and creating and localizing content.

Over 30% of threat actor Gemini use from the country was linked to APT42, Google said.

A hand reaching out to touch a futuristic rendering of an AI processor.

APT42’s Gemini activity reflected the group’s focus on crafting successful phishing campaigns.

APT42 also used text generation and editing capabilities to craft phishing messages, particularly those targeting US defense organizations.

APT42 also utilized Gemini for translation including localization, or tailoring content for a local audience.

Ever sinceChatGPTwas first published, security researchers have been warning about the abuse in cybercrime.