North Korean Hackers Test AI to Advance Their Cyberattacks

North Korea's Kimsuky hacking group has established and tested local artificial intelligence (AI) tools as it researches ways to integrate the technology into malware development and attack techniques, South Korean cybersecurity firm Genians said Monday.

The group appears to have used generative AI to create decoy documents. Genians said Kimsuky is developing capabilities to incorporate existing AI models into its attack activities.

Inside Kimsuky's Local AI Tools

Kimsuky is a threat group operating under North Korea's Reconnaissance General Bureau. The US Treasury sanctioned it in 2023 as a state-controlled espionage unit.

Investigators found evidence that Kimsuky had installed and configured several tools for running AI models locally, including Ollama, GPT4All, and Msty.

Genians said local processing could reduce the risk of sensitive or stolen material being sent to external AI services. The researchers also identified retrieval-augmented generation, or RAG, which allows AI models to retrieve information from selected documents.

… Continue reading the full article at the original source below.