North Korean Hackers Build Offline AI Stack to Automate Cyberattacks and Evade Detection

North Korean spies are running local LLMs to cause AI mischief

North Korean government snoops are operating LLMs locally and collecting technology to weave AI into their attack operations, according to South Korean security firm Genians. The researchers said they observed Kimsuky setting up and operating local LLM environments using Ollama, GPT4All, and Msty, experimenting with other AI tools such as Cursor, and using retrieval-augmented generation (RAG) for local document searches. This prevents the data from getting sucked into the cloud where enemies might see it and try to stop it. Kimsuky, a cyber-espionage crew that operates under North Korea's Reconnaissance General Bureau, has for years used phishing and decoy documents in attacks targeting government agencies, think tanks, academia and security research organizations. Genians' findings "provide concrete evidence that the Kimsuky-affiliated threat actor is moving beyond one-off experimentation with AI and is continuously preparing to integrate the technology into actual attack capabilities, including malware development, data analysis, and the advancement of attack techniques," the researchers said in a Monday report. The North Korean group's recent phishing emails use ZIP archives containing malicious LNK files - Kimsuky typically disguises these as materials related to international events, research reports, or meeting requests. When the recipient opens the archive and executes the LNK file contained within it, the shortcut runs an embedded PowerShell loader. In some cases, the goon squad used AI to create lures related to virtual assets and finance, we're told. These decoy documents "use natural language, a highly polished structure, and formats similar to actual business materials to increase user trust and induce the execution of malicious files," the security analysts noted. Additionally, the Pyongyang spies use various obfuscation techniques, including Base64 encoding, string splitting, and custom decoding routines, to hide the files' malicious behavior. The PowerShell script collects a ton of system information, including operating system version and architecture, system configuration, PC type, operating system installation and boot history, and a list of running processes. The attackers use this information to assess the infected environment and support follow-on attacks. As with earlier Kimsuky campaigns, these intrusions use Git repositories for command-and-control (C2) infrastructure. "During the analysis, Genians Security Center identified multiple public GitHub repositories operated by the threat actor," the researchers wrote. "One repository contained not only configuration files and PowerShell scripts, but also various payloads used in subsequent attacks." Additionally, the months-long investigation uncovered the spies also using the Git-based C2 infrastructure for malware development and testing, stolen data management, and AI technology research. This included setting up multiple local LLM environments using Ollama, GPT4All, and Msty on infrastructure it controlled. "Because the local approach prevents conversation data from being transmitted to external AI services, it reduces the risk of external exposure, making it a particularly attractive option for a state-sponsored threat actor," Genians said. The miscreants also collected a "large number" of libraries, such as LLaMaSharp and Microsoft.Extensions.AI, plus packages including OpenAI and Azure.AI.OpenAI, which call and integrate commercial AI services into their own custom applications. "The fact that development components spanning 'local AI execution → document retrieval (RAG) → automated agents → external AI integration' were collected together strongly suggests that they were not gathered out of simple curiosity, but for the direct development of an AI-based tool designed for a specific purpose," according to the threat hunters. Genians uncovered logs containing speech-to-text tools, such as OpenAI's Whisper speech recognition models, and evidence that the spies used Cursor AI to edit code and tested RAG for document-based question answering. Using RAG on stolen files can help attackers more quickly and automatically identify valuable information within large volumes of data. While the researchers noted that they did not identify any evidence that the Norks have begun training their own models - but rather remain focused on applying AI to malware development and attack operations - the findings make a strong case for defenders needing to shift away from content-based assessment to behavior-based detection. Assessing threats based on the quality of fake documents, such as unnatural translated language, poor formatting, and spelling errors, is no longer effective because AI is really good at producing convincing decoys. In addition to using indicators of compromise (IoC) to detect attackers in their environments, organizations should look for anomalous behaviors following LNK execution - such as PowerShell execution, persistence establishment, and external communications - to hunt for threats.®

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espionage groups has begun running artificial intelligence (AI) offline on its own servers, connecting document-search tools to files in its possession, and collecting the software parts needed to build AI into its malware. South Korean security firm Genians says it uncovered the setup after months of tracking and log analysis on infrastructure tied to Kimsuky, a hacking unit under North Korea's Reconnaissance General Bureau. Genians found no evidence that the group had trained an AI model of its own, and the firm does not offer that as reassurance. It describes an actor in a "research and knowledge acquisition" stage, assembling and testing existing tools rather than making new models, with the apparent aim of folding AI through the operation, from writing malware to analyzing data. For an intelligence unit that has spent years phishing government, research, and other strategic targets, that points to attacks that are quicker to prepare and harder to spot. With nothing here to patch, the weight lands on defenders. Once AI writes the bait, the tells they once relied on weaken: stilted translation, clumsy formatting, spelling mistakes. What an intrusion does on the machine becomes the thing to watch. Genians' report tells defenders to correlate LNK execution, PowerShell, hidden scheduled tasks, GitHub traffic, and later payload activity instead of judging a lure mainly by how polished it looks. The core evidence is tools for running language models offline: Ollama, GPT4All and Msty, all found on infrastructure Genians linked to the group. The report says they were run or configured, not merely downloaded: Ollama generated the keys created on first launch, while GPT4All carried a configured localdocs_v3.db, the database used by its LocalDocs retrieval-augmented generation (RAG) feature. RAG lets a model answer from a private collection of documents. The database is evidence that the actor tried to connect documents in its possession to an AI system; it does not establish that those documents were stolen. The researchers separately recovered an operator request to check a data set for wallet details, Gmail credentials and site-registration history, ending, "The more detailed the analysis, the better. Please do not do it haphazardly." The report could not confirm that this particular request was submitted to an AI service. The group did not stop at ready-made apps. On the same infrastructure, the firm found developer libraries including LLaMaSharp, Microsoft's Semantic Kernel and Microsoft.Agents.AI, components for building AI functions into custom C# and .NET software. It also found OpenAI's Whisper speech-to-text files with a guide on extracting text from audio, and active traces of Cursor, an AI-powered coding editor. None of these tools is exotic. What is new is a nation-state espionage group assembling them on purpose to push AI deeper into its own attack workflow. The activity extends a Kimsuky campaign Genians calls Operation GitPower, which abuses GitHub repositories as command channels in an LNK-to-PowerShell infection chain and has distributed encrypted AsyncRAT payloads disguised as image files Fortinet separately documented the broader GitHub-C2 pattern in April in attacks targeting South Korean users. That report corroborates the surrounding technique family, not Genians' new local-AI artifacts; Reuters said the new findings could not be independently verified. The newly observed offline stack (the local models, RAG database, and transcription tools) has not been shown running against a victim in the reporting to date, and no GitPower victim count has been disclosed. Set against the broader "AI attack tools" framing, that is a narrower near-term change than the label implies, with the groundwork for automating parts of the operation still being laid. Genians ties the operation to Kimsuky using overlaps with earlier campaigns, infrastructure clues, and North Korean vocabulary recovered from operator logs. The U.S. Treasury, which sanctioned Kimsuky in 2023, describes it as subordinate to the Reconnaissance General Bureau and primarily focused on intelligence collection. The step also fits a pattern Genians flagged in 2025, when it linked Kimsuky to a spear-phishing attack that used ChatGPT-generated images of South Korean military employee ID cards.

North Korea's hackers are building their own AI tools to dodge the guardrails

Researchers say the state-linked group Kimsuky is running open models on its own machines, automating phishing and malware while staying out of sight of commercial AI providers. North Korea's hackers have found a way to harness AI without ever handing their secrets to a Silicon Valley company. According to the South Korean cybersecurity firm Genians, the state-linked group Kimsuky has been building its own AI tools to automate and sharpen its cyberattacks. The clever part is how deliberately it stays off the grid. Rather than lean on commercial chatbots, which log activity and screen for abuse, the group is running open models such as Ollama, GPT4All and Msty directly on its own machines, which keeps sensitive work away from any provider that might notice or report it. That choice is the whole strategy in miniature. By keeping everything local, Kimsuky sidesteps the monitoring and safety filters that firms like OpenAI have built precisely to catch this kind of misuse, turning freely available AI software into an in-house weapon nobody else can see running. The toolkit goes well beyond a chatbot, too. Genians says the group has pulled in retrieval-augmented generation to sift stolen documents, AI agent frameworks to string tasks together, speech-to-text software, and even Cursor, the AI-assisted coding tool, to help write and refine its malware. With that stack in hand, the group can work faster and more convincingly across the board. The researchers describe it automating attacks, crafting more believable phishing lures, weaving AI into malware development, and analysing whatever it steals, all without the bottleneck of doing each step by hand. The deception has become notably slicker as a result. Among the group's outputs are finance- and cryptocurrency-themed documents designed to mimic legitimate workplace reports, the sort of polished bait that is far harder to dismiss than the clumsy phishing of years past. None of this comes out of nowhere, because Kimsuky is a known and sanctioned operator. The US Treasury blacklisted it back in 2023, describing it as a North Korean government-controlled cyber-espionage group that gathers intelligence to serve Pyongyang's strategic aims. The group also fits a long pattern of North Korean cyber activity aimed at money and secrets alike. Pyongyang's crews have repeatedly gone after developers and crypto users, including poisoned code packages built to steal developer credentials, and AI simply makes those campaigns cheaper to run at scale. The regime's hackers are, in effect, a state enterprise. Washington has sanctioned several North Korean groups behind attacks such as WannaCry, reflecting how central cybercrime has become to a heavily isolated economy in need of hard currency. What makes the AI angle worrying is how it lowers the cost of scale. The same automation is helping fuel a wider surge in online crime, with the global scam economy passing $442bn, and a well-resourced state actor is far better placed to exploit these tools than a lone fraudster. It also feeds a thornier question the industry has yet to answer. As autonomous software takes on more of the work, it remains unsettled who is accountable when an AI agent causes harm, and a hostile government running its own models sits well outside any provider's reach in the first place. One caveat is worth keeping in view. Genians' findings could not be independently verified, so the precise scope of the operation rests on a single firm's research, even if it aligns with everything known about the group. It also complicates the case that open models are harmless by default. The very openness that lets researchers and startups build freely is what lets a sanctioned state run the same software beyond anyone's reach, a trade-off the industry has been reluctant to confront head-on. The broader lesson is uncomfortable all the same. The safety controls that leading labs tout work only when the misuse runs through them, and by choosing open models on private hardware, the world's most determined attackers have found the obvious way around them.

Experts warn North Korean hackers are increasingly using AI to build smarter and more devious cyberattacks

* Kimsuky used local AI tools to evade monitoring and enhance operations * Researchers observed extensive AI-driven capability building across the group's infrastructure * Defenders urged behavior-based detection to spot evolving AI-enabled threats North Korean hackers have found a way to use Generative Artificial Intelligence (GenAI) to supercharge their activities without tipping off the tool's maintainers. When people use AI tools like ChatGPT or Claude, their activities can be (at least to some extent) tracked and curbed - with OpenAI recently identifying and terminating multiple ChatGPT accounts used in phishing and human trafficking. That is why Kimsuky - a known state-sponsored North Korean threat actor, used Ollama, GPT4All and Msty locally, allowing them to process documents without sending any sensitive information to outside AI services. "Consistent process of capability development" The attacks were spotted by security researchers Genians who "conducted months of tracking and log analysis on the infrastructure utilized as C2 in this campaign," to identify the tools they used. Aside from the three LLMs, they also used retrieval augmented generation (RAG) tools for document search, as well as AI agent development frameworks, text-to-speech software, and an AI-assisted coding tool called Cursor. Using AI to write malicious code is not as simple as it sounds, due to various guardrails set up by the developers. As a result, AI in crime has been mostly limited to drafting phishing emails and crafting authentic-looking but malicious landing pages. However, Kimsuky has shown that AI in cybercrime continues to evolve and is becoming an ever-greater threat. "What was observed in the threat actor's infrastructure was not merely evidence of several documents being created with AI, but a consistent process of capability development: establishing local LLM runtime environments, configuring RAG based on documents in the actor's possession, collecting AI agent development frameworks, and acquiring libraries for integration with external commercial AI services," Genians concluded. As a result, defenders must move from content-based assessment to behavior-based detection, the researchers warned, saying this should serve "as the fundamental premise of security recommendations." "In addition to indicator of compromise (IoC)-based detection, organizations should contextually correlate the sequence of anomalous activities following LNK execution, including PowerShell execution, persistence establishment, and external communications, to assess the overall threat level." Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.

North Korean hacking group builds AI tools for cyberattacks, report says

The cybersecurity firm, Genians, said it found evidence ⁠that the ⁠North Korean-linked group Kimsuky had set up tools for running and managing AI models locally, including Ollama, GPT4All and Msty, alongside document search technology known as retrieval augmented generation (RAG). A North Korean hacking group built large language model tools and collected software that could help automate cyberattacks, analyse stolen material and produce more convincing phishing campaigns, a South Korean cybersecurity firm said on Monday. The cybersecurity firm, Genians, said it found evidence ⁠that the ⁠North Korean-linked group Kimsuky had set up tools for running and managing AI models locally, including Ollama, GPT4All and Msty, alongside document search technology known as retrieval augmented generation (RAG). According to the company, the tools could allow operators to process documents without sending sensitive information to outside AI ⁠services. Genians also found AI agent development frameworks, speech-to-text software and Cursor, an AI-assisted coding tool, on infrastructure ⁠it linked to the campaign. The findings suggest Kimsuky is moving beyond using generative AI to create phishing lures and is building capacity to integrate existing AI models into malware development, data analysis and attack automation, Genians said in a report. Genians also said it found finance and cryptocurrency-themed decoy documents that appeared to have been generated with AI. The materials were designed to resemble legitimate investment reports and other workplace documents, it said. The ⁠company's findings could not be independently verified. North Korea has for years used state-linked cyber units for espionage, financial theft and revenue generation, according to US and South Korean authorities, as well as cybersecurity experts. The US Treasury in 2023 sanctioned Kimsuky as a North Korean government-controlled cyber-espionage group, saying it gathered intelligence in support of Pyongyang's strategic objectives.

North Korean hacking group builds AI tools for cyberattacks, report says

SEOUL, Aug 10 (Reuters) - A North Korean hacking group built large language model tools and collected software that could help automate cyberattacks, analyse stolen material and produce more convincing phishing campaigns, a South Korean cybersecurity firm said on Monday. The cybersecurity firm, Genians, said it found evidence that the North Korean-linked group Kimsuky had set up tools for running and managing AI models locally, including Ollama, GPT4All and Msty, alongside document search technology known as retrieval augmented generation (RAG). According to the company, the tools could allow operators to process documents without sending sensitive information to outside AI services. Genians also found AI agent development frameworks, speech-to-text software and Cursor, an AI-assisted coding tool, on infrastructure it linked to the campaign. The findings suggest Kimsuky is moving beyond using generative AI to create phishing lures and is building capacity to integrate existing AI models into malware development, data analysis and attack automation, Genians said in a report. Genians also said it found finance and cryptocurrency-themed decoy documents that appeared to have been generated with AI. The materials were designed to resemble legitimate investment reports and other workplace documents, it said. The company's findings could not be independently verified. North Korea has for years used state-linked cyber units for espionage, financial theft and revenue generation, according to U.S. and South Korean authorities, as well as cybersecurity experts. The U.S. Treasury in 2023 sanctioned Kimsuky as a North Korean government-controlled cyber-espionage group, saying it gathered intelligence in support of Pyongyang's strategic objectives. (Reporting by Joyce LeeEditing by Ed Davies)

Hackers reportedly building ChatGPT-like AI tools to automate cyberattacks, make them more convincing

The technology could allow hackers to analyse large amounts of stolen information, automate different tasks and create more convincing scams. Hackers are finding new ways to use AI to make cyberattacks more effective and difficult to detect. A North Korea-linked hacking group is reportedly building ChatGPT-like large language models (LLMs) that may help automate parts of its operations. According to a Reuters report, South Korean cybersecurity company Genians has found signs that the Kimsuky hacking group is setting up AI software on its own systems. The technology could allow hackers to analyse large amounts of stolen information, automate different tasks and create more convincing scams. Genians reportedly found that Kimsuky was using tools including Ollama, GPT4All and Msty. These tools can run AI models locally on a computer or private system. This means hackers would not have to depend on cloud-based AI services to process information. Also read: OpenAI exec takes a jab at Anthropic over user account suspension, Sam Altman reacts Researchers also discovered signs of retrieval augmented generation (RAG) technology. RAG allows an AI system to search through large collections of documents . Cybercriminals are already using AI to write phishing emails. AI can make fraudulent messages sound more natural and professional, which may make them harder to identify. However, researchers believe Kimsuky could be exploring much wider uses. Genians reportedly found software related to AI-assisted coding, speech-to-text features and the development of AI agents. This may help automate parts of cyberattacks, process stolen information more quickly and help create malicious software. Also read: Apple iPhone launch event may take place on Sept 9: iPhone 18 Pro, iPhone Ultra and what more to expect Researchers also reportedly found finance and cryptocurrency-related documents that appeared to have been created using AI. The files were made to resemble genuine reports and workplace documents. Attackers could use convincing documents like these to trick victims to open malicious files, reveal sensitive information or fall for financial scams. So, users are advised to be extra careful about unexpected messages, files and financial offers they receive online.