North Korea Upgrades: Kim Jong Un's Hackers Harness AI to Break Into Your Computer

A new report reveals that the North Korean cyber group Kimsuky is upgrading its capabilities by integrating artificial intelligence into its operations. According to Reuters, the group has set up local tools for running AI models such as Ollama and GPT4All, and uses RAG technology to process stolen information. Genians disclosed that the hackers created AI-based decoy documents in the finance and crypto sectors. The findings have not yet been verified, but they align with known patterns of activity. In 2023, the US Treasury imposed sanctions on Kimsuky.

A new report reveals that the cyber group Kimsuky, linked to the North Korean regime, is upgrading its capabilities by integrating artificial intelligence into its operations. According to the Reuters news agency, researchers found evidence that the group set up tools for running and managing AI models locally, such as Ollama, GPT4All, and Msty, and also uses advanced document search technology (RAG). The main advantage of the local system is that it allows hackers to process vast amounts of sensitive information stolen from their victims without transferring data to external AI services, which could have exposed their activities. In addition, an infrastructure was exposed that includes frameworks for developing AI agents, speech-to-text software, and the code development tool "Cursor". Genians disclosed that the hackers created AI-based decoy documents in the finance and crypto sectors, designed to look like legitimate investment reports and lead to the download of malicious software. The findings have not yet been independently verified, but they align with North Korea's known pattern of activity. As early as 2023, the US Treasury imposed sanctions on Kimsuky and designated it as a state-sponsored cyber espionage group. Experts warn that North Korea uses cyber units for espionage, financial theft, and generating revenue that bypasses sanctions. Previous investigations showed that Kimsuky used ChatGPT to forge identity documents in phishing attempts against security institutions.