North Korea's Kimsuky Leverages Offline AI Tools for Enhanced Phishing and Malware Automation

North Korea's Kimsuky group has developed an offline AI stack using tools like Ollama and GPT4All to enhance phishing campaigns and automate malware development. The group is in a research phase, assembling existing AI tools rather than training custom models, aiming to integrate AI into their attack workflows.

North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espionage groups has begun running artificial intelligence (AI) offline on its own servers, connecting document-search tools to files in its possession, and collecting the software parts needed to build AI into its malware.

South Korean security firm Genians says it uncovered the

Read original article