AI tools used to enhance phishing and APT attacks in China
Ruixing's 2024 China Cybersecurity Report documents how attackers use AI language models like ChatGPT to generate sophisticated phishing emails that bypass security filters and enhance APT campaign success. APT groups including Patchwork, Bitter, and SideWinder targeted Chinese government, defense, and research institutions using AI-assisted techniques to steal sensitive information.
What happened
According to Ruixing's 2024 China Cybersecurity Report, attackers are using AI language models such as ChatGPT to generate phishing emails with nearly perfect grammar and logic that can bypass traditional spam filters and enable automated, personalized attacks.
APT groups including Patchwork, Bitter, and SideWinder targeted China in 2024. Patchwork attacked Chinese universities and aerospace research enterprises in July and August using crafted phishing emails to deliver malicious code. Bitter and SideWinder targeted China's defense industry using custom backdoor programs to steal state secrets and install spyware.
Reported impact
The report indicates that AI-assisted phishing increases attack success rates by enhancing credibility and deceptive quality of emails tailored to specific industries or individuals.
APT attackers used AI to more precisely collect critical infrastructure information and personal privacy data, and potentially tamper with data through the technology's information processing capabilities.
Index analysis
Ruixing's threat intelligence center detected multiple APT attack incidents in 2024 and documented the use of AI-generated phishing content alongside traditional malware delivery methods.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.