Microsoft Threat Intelligence disclosed that North Korean hacking groups have embedded AI into their entire operational workflows, demonstrating a "high" level of AI adoption. The report specifically names Jade Sleet, Coral Sleet, and Jasper Sleet as key actors leveraging these technologies to enhance their attack capabilities. Operational details reveal Jade Sleet launched recruitment-themed attacks through three front companies within one week, while Onyx Sleet produced over 100 tailored PDF lure documents in August and September. Coral Sleet is suspected of using an AI development platform to plant trojans in private GitHub repositories. Additionally, since late October, Onyx Sleet and Pearl Sleet have begun utilizing ARTEX, an open-source agentic AI penetration-testing framework. Microsoft assesses that these operations remain human-led rather than fully autonomous. The campaigns primarily target cryptocurrency and financial institutions, information technology companies, the software supply chain, government entities, and education-related organizations.