Google Threat Intelligence Group (GTIG) / Google Cloud
UNC4899 (PUKCHONG) misuse of Gemini · 2025-11-05 (datePublished)
UNC4899 (aka PUKCHONG), a North Korean threat actor notable for their use of supply chain compromise, used Gemini for a variety of purposes including developing code, researching exploits, and improving their tooling.