据彭博社周一发布的一份报告引述安全专家称，朝鲜黑客可能正在利用人工智能来策划和实施加密货币盗窃。
North Korean hackers may be using AI to plan and carry out cryptocurrency thefts, according to security experts cited in a Bloomberg report published on Monday.
他们指出，近期攻击的复杂性和精准度不断提高，包括上周针对币安的创纪录盗窃案。
They point to the growing complexity and precision of recent attacks, including last week’s record theft from Binance.
人工智能的使用尚未得到证实，彭博社将其呈现为专家的评估，而非既定事实。
The use of AI has not been confirmed, and Bloomberg presents it as the experts’ assessment rather than an established fact.
然而，他们相信，黑客可能正在利用人工智能模型来研究目标、识别弱点，并诱骗员工交出对敏感系统的访问权限。
However, they believe the hackers may be using AI models to research targets, identify weaknesses and trick employees into handing over access to sensitive systems.
最新的警告紧随美国联邦调查局（FBI）周六发布的一份警报之后，该警报指责朝鲜在10月29日前后从全球最大加密货币交易所币安窃取了超过60亿美元。
The latest warning follows an FBI alert published on Saturday, which blamed North Korea for stealing more than $6bn from Binance, the world’s largest cryptocurrency exchange, on or around 29 October.
该机构将此次攻击归咎于一个名为“TraderTraitor”的组织，该组织此前也被关联到2025年2月从Bybit窃取15亿美元的案件。
The agency attributed the attack to a group known as TraderTraitor, which it has also linked to the $1.5bn theft from Bybit in February 2025.
币安估计其损失约为63亿美元。据彭博社报道，调查人员认为，攻击者获得了一名软件工程师笔记本电脑的访问权限，从而触达了负责处理提款的系统。
Binance estimates its losses at around $6.3bn. According to Bloomberg, investigators believe the attackers gained access to a software engineer’s laptop, allowing them to reach the systems responsible for processing withdrawals.
网络安全公司Quorum Cyber的Federico Charosky对彭博社表示，一种常见手法是通过虚假面试接触交易所工程师。在此过程中，受害者被说服安装恶意代码，从而让攻击者获得其设备乃至更广泛公司网络的访问权限。
Federico Charosky of cybersecurity firm Quorum Cyber told Bloomberg that one common tactic is to approach exchange engineers through fake job interviews. During the process, victims are persuaded to install malicious code, giving attackers access to their devices and potentially the wider company network.
区块链分析公司TRM Labs的Ari Redbord对彭博社表示：“这是一个拐点，这次攻击前所未有。”
“This is an inflection point, and this attack is unprecedented,” Ari Redbord of blockchain analysis firm TRM Labs told Bloomberg.
Redbord称，朝鲜在一个晚上窃取的金额，大致相当于此前六年窃取总量的总和。彭博社还指出，TRM Labs4月份的一份报告描述了近期涉及数周定向操控的攻击。
Redbord said North Korea had stolen roughly as much in a single evening as it had taken over the previous six years combined. Bloomberg also pointed to an April report from TRM Labs, which described recent attacks involving weeks of targeted manipulation.
研究人员认为，人工智能可能在协助攻击者方面发挥了作用，此外还有与目标的面对面会面。
Researchers suggested that AI may have helped the attackers, alongside face-to-face meetings with their targets.
与朝鲜有关的加密货币盗窃的规模今年已引起关注。加密新闻网站援引TRM Labs的数据报道称，2026年前四个月，与朝鲜有关的组织占加密货币黑客攻击损失的大约76%。
The scale of North Korea-linked crypto thefts has already drawn attention this year. In the first four months of 2026, groups associated with the country accounted for around 76% of cryptocurrency hack losses, crypto.news reported, citing TRM Labs.
大部分损失来自4月份针对KelpDAO和Drift Protocol的两起攻击，合计造成约6亿美元的损失。
Much of the damage came from two attacks in April, targeting KelpDAO and Drift Protocol, which resulted in losses of around $600m combined.
其他朝鲜黑客团体也在尝试使用AI。今年8月，韩国网络安全公司杰尼安斯报告称，金秀基组织正在使用自己的AI工具生成恶意软件和钓鱼信息。
Other North Korean hacking groups have also been experimenting with AI. In August, South Korean cybersecurity firm Genians reported that the Kimsuky group was using its own AI tools to generate malware and phishing messages.
尽管AI在币安盗窃案中的作用程度仍不清楚，但安全研究人员越来越担心，这些工具可能使定向攻击更容易组织、也更难检测。
While the extent of AI’s role in the Binance theft remains unclear, security researchers are increasingly concerned that these tools could make targeted attacks easier to organise and harder to detect.