Microsoft assesses that North Korean threat actors have reached a high level of AI adoption, using generative and agentic systems to accelerate reconnaissance, social engineering, fraudulent employment, malware development, and post-compromise analysis. Jade Sleet, Coral Sleet, and Jasper Sleet have operationalized AI across their workflows, while Diamond Sleet, Onyx Sleet, Pearl Sleet, and Sapphire Sleet are rapidly expanding their use. Observed activity includes mass-produced Onyx Sleet phishing lures, Jade Sleet front companies, Coral Sleet's trojanized private repositories, Sapphire Sleet's Rust software compromise, and operational use of the ARTEX agentic penetration-testing framework. Microsoft assesses that these operations remain human-directed and use AI mainly to increase speed and scale.