The North Korean group Kimsuky is developing artificial intelligence capabilities for automating cyber attacks and analyzing stolen information.

The Kimsuky hacker group, associated with the North Korean regime, is expanding its capabilities by using artificial intelligence to automate cyber operations, analyze stolen information, and create phishing campaigns, according to an analysis by the South Korean company Genians. Researchers discovered that Kimsuky has installed tools such as Ollama and GPT4All, allowing for local execution of AI models, which reduces the risks of exposing sensitive data. The group's infrastructure includes frameworks for developing AI agents and speech-to-text processing tools.

Kimsuky also aims to integrate AI into all stages of attacks, facilitating the development of malware and rapid data analysis. Additionally, trap documents generated with the help of AI, designed to deceive victims, have been identified. Kimsuky is known for cyber espionage and has been sanctioned by U.S. authorities for its activities. The evolution of the group suggests a shift in the use of AI by cyber hackers, which is becoming an integral part of their operations.