The report traces AI research back to the late 1990s. North Korean teams concentrate on pattern recognition, voice processing, and data optimization, and since the 2010s they have expanded laboratories and built homegrown algorithms. Investigators also found studies that rely on Nvidia GeForce RTX 2700 GPUs, even though OFAC placed a full export and re-export ban on such cards for North Korean users.
Analysts warn that North Korean cyber units now test AI in every phase of online operations. Engineers train models to spot vulnerabilities, filter large data sets, and imitate human behaviour in chats and support channels. That toolkit supports phishing campaigns, wallet drainers, and more elusive crypto theft schemes.
Specialists describe growing use of deepfake generation and identity fabrication. AI assists in creating false faces, synthetic voices, and forged documents that pass remote checks on exchanges or fintech apps. Once hackers gain access, they direct stolen Bitcoin, Ethereum, and stablecoins through mixers, cross-chain bridges, and low-compliance venues. Machine-driven analytics help optimize routes so investigators face greater difficulty when tracking flows.
The report also highlights work on multi-person tracking, where algorithms link the same individual across separate video feeds. Combined with CCTV or drone footage, such tools could support automated surveillance around borders, ports, and launch facilities, adding another layer of security to programs funded by crypto raids.
Washington has tried to curb access to advanced chips. The U.S. Department of Commerce released its Framework for Artificial Intelligence Diffusion in January, just before the Biden administration left office. Regulators now divide hardware access by national security risk and restrict some AI model weights for high-risk jurisdictions. Countries such as China fall under tighter controls.
In April, reports indicated review of earlier policies that limit global supply of U.S. AI chips. Officials examined tiered purchase rules for advanced semiconductors and considered changes under the Trump administration. Even with stricter categories, the new study on North Korean AI shows how Nvidia GPUs still surface inside research networks that operate far from public view.
For crypto markets, the findings confirm a clear pattern. North Korean operators treat crypto assets as a core funding channel and now pair GPU-driven AI with long-running hacking programs. Sanctions and export bans slow hardware shipments but fail to cut supply completely.
Each new generation of graphics cards and models gives Pyongyang additional tools to refine theft, laundering, and obfuscation, raising the bar for exchanges, regulators, and chain-analysis firms tasked with shutting those flows down.
