Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
North Korean hacking group Kimsuky has shifted to running AI offline on its own servers, using document-search tools and gathering components to automate phishing and malware development.
North Korea’s state-sponsored hacking group Kimsuky is now running artificial intelligence offline on its own servers to enhance phishing attacks and automate malware development. Instead of using public chatbots, the group connects document-search tools to its own files and assembles software components to embed AI into malicious code. South Korean security firm Genians uncovered the operation, warning it marks a significant escalation in the group’s cyber capabilities.