North Korea’s Kimsuky Turns AI Into a Crypto Hacking Weapon
·2 min read
Compiled by KHAO Editorial
— aggregated from 2 sources + 4 references discovered via search.
See llms.txt for citation guidance.
✓ KHAO Verified
North Korea-linked hacking group Kimsuky is building and testing an expanding arsenal of artificial intelligence (AI) tools that researchers say could eventually help automate phishing, analyze stolen data and sharpen malware development.
Key facts
Investigators found AI development packages including Microsoft Semantic Kernel, Microsoft Agents AI and LLaMaSharp, alongside components for connecting programs with OpenAI and Azure OpenAI services
Amid the Coldcard chaos that has rattled bitcoin holders for days, a wallet dating back to Dec. 2013 suddenly shifted…
In an analysis published Monday, Genians Security Center stated that months of tracking infrastructure associated with Kimsuky uncovered evidence of local large language models, AI development
The feature uses retrieval-augmented generation, or RAG, which allows an AI system to search a collection of documents before answering questions
Summary
Kimsuky tested 3 local AI platforms as North Korea expands its cyber capabilities. Genians says Kimsuky has used AI-generated phishing documents since the start of 2026. Kimsuky has not trained its own AI models, but Genians warns its capabilities are advancing. In an analysis published Monday, Genians Security Center stated that months of tracking infrastructure associated with Kimsuky uncovered evidence of local large language models, AI development frameworks, speech recognition tools and generative AI-created documents.