Nation-state groups Forest Blizzard, Emerald Sleet, Crimson Sandstorm, Charcoal Typhoon, and Salmon Typhoon are using large language models (LLMs) to improve and expand their criminal activities, according to findings from Microsoft Threat Intelligence Cyber Signals 2024, done in collaboration with Open AI.
The study did not identify significant attacks employing the LLMs that Microsoft and Open AI monitored, but it revealed that these groups have been using LLMs to improve their reconnaissance, scripting, research, and other activities to gain crucial information before attacks.
