Kimsuky Expands Its Cyber Espionage Arsenal With Local AI Development Environment

Kimsuky Expands Its Cyber Espionage Arsenal With Local AI Development Environment

Kimsuky, the North Korean espionage group, has expanded a campaign known as Operation GitPower with a local artificial intelligence development setup. It combines phishing emails with tools that may help create lures, review stolen material, and adapt operations faster. The entry point remains simple but effective. Targets receive ZIP archives containing Windows shortcut, or LNK, files dressed up as correspondence, research material, embassy mes…

Kimsuky Uses Local AI Development Environment to Expand Cyber Espionage Tooling in Operation GitPower

North Korean state-backed threat actor Kimsuky is extending its established espionage playbook with locally hosted artificial intelligence tooling, according to new research into an activity cluster tracked as Operation GitPower. The campaign retains familiar phishing-led intrusion chains but shows the operators preparing AI-assisted capabilities for malware development, data analysis, social engineering, and operational automation. The […] This…