North Korea’s Kimsuky hacking group has set up and tested local artificial intelligence tools to integrate the technology into malware development and attack techniques, according to South Korean cybersecurity firm Genians. Researchers discovered that Kimsuky had installed several tools for running AI models locally, including Ollama, GPT4All, and Msty, along with retrieval-augmented generation technology and speech-to-text software. The group used generative AI to create financial and cryptocurrency decoy documents mimicking investment reports. Industry estimates indicate North Korea-linked operations stole 2.02 billion dollars in crypto during 2025. Genians assesses that Kimsuky’s efforts remain focused on research and knowledge acquisition, with no evidence that the group has trained its own AI models.
Source: Read the original article
