North Korean hacking group builds AI tools for cyberattacks, report says

The tools could allow operators to process documents without ​sending sensitive information to outside AI services

The cybersecurity firm, Genians (263860.KQ), opens new tab, said it found evidence that the North Korean-linked group Kimsuky ​had set up tools for running and managing AI ​models locally

A North Korean hacking group built large language model tools and collected software that could help automate ​cyberattacks, analyse stolen material and produce more convincing phishing ‌campaigns, a South Korean cybersecurity firm said on Monday.

The cybersecurity firm, Genians (263860.KQ), said it found evidence that the North Korean-linked group Kimsuky ​had set up tools for running and managing AI ​models locally, including Ollama, GPT4All and Msty, alongside document ⁠search technology known as retrieval augmented generation (RAG).