North Korean hacking group builds AI tools for cyberattacks, report says
Genians said the group used local AI models to process documents securely and build tools that could support malware and attack automation.
- On Aug 10, South Korean cybersecurity firm Genians reported that the North Korean-linked hacking group Kimsuky has integrated AI-enhanced tools to automate cyberattacks, analyze stolen data, and produce more convincing phishing campaigns.
- Genians discovered Kimsuky is utilizing local AI-enhanced models like Ollama, GPT4All, and Msty, alongside document search technology known as RAG, allowing operators to process documents securely without exposing sensitive data to outside services.
- The group is also employing AI-assisted coding tools like Cursor and AI-generated finance-themed decoy documents designed to resemble legitimate investment reports, marking a strategic shift toward integrating AI into malware development.
- North Korea has long used state-linked cyber units for espionage and financial theft; Treasury sanctioned Kimsuky as a government-controlled cyber-espionage group supporting Pyongyang's strategic objectives.
- While Genians noted the findings suggest advanced capabilities in malware development and attack automation, the firm acknowledged these specific reports regarding Kimsuky's AI integration could not be independently verified.
39 Articles
39 Articles
North Korean hackers use local AI to automate attacks on crypto firms
North Korea-linked hacking group Kimsuky has built three local AI environments as part of preparations for cyberattacks targeting cryptocurrency and financial companies, according to new cybersecurity research. Genians, a South Korean cybersecurity firm, said in a report released Monday that…
North Korean hacking group Kimsuky has begun using artificial intelligence tools that can help it automate cyberattacks, analyze stolen data and create more convincing phishing campaigns designed to trick people into revealing sensitive information, according to South Korean cybersecurity firm Genians. The company's findings could not be independently verified.
Dnevni list Danas
n1info.rsA North Korean hacking group has developed tools based on large-scale language models and designed software that could help automate cyber attacks, analyze stolen data and craft more believable data-stealing phishing campaigns, a South Korean cybersecurity firm said today.
North Korean hackers create AI tools for cyberattacks - MixKimsuky hacker group has created tools to locally launch AI models and analyze stolen data. They are also use AI to create phishing campaigns and malware.
The tools could allow operators to process documents without sending sensitive information to external AI services.
Coverage Details
Bias Distribution
- 38% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
