North Korean Hackers Are Using AI to Upgrade Cyberattacks
A new report says North Korean hackers are using AI tools to support cyber operations, data analysis and potentially malware development.
# North Korean Hackers Are Using AI to Upgrade Cyberattacks
Artificial intelligence is becoming a powerful tool for businesses and developers.
But cyber attackers are learning to use it too.
A new report from South Korean cybersecurity firm Genians says the North Korean-linked hacking group Kimsuky has been using AI tools to support its cyber operations.
How Are Hackers Using AI?
According to Genians, the group has used tools including Ollama, GPT4All and Msty to run AI models locally.
Researchers also identified Retrieval-Augmented Generation (RAG) technology, AI agent frameworks, speech-to-text software and AI-assisted coding tools such as Cursor.
These tools could help attackers analyze stolen information, process documents, automate parts of their operations and potentially assist with malware development.
Why Is Local AI Important?
One interesting detail is that some of these AI systems were reportedly operated locally.
Running AI locally can reduce the need to send sensitive information to external AI services.
For attackers, that could make AI useful for processing stolen documents or other information while keeping the data away from public AI platforms.
AI Is Changing Cybersecurity
Cybersecurity has always involved automation.
Defenders automate threat detection, while attackers automate different parts of their operations.
AI could make both sides more capable.
An AI system can analyze large amounts of information, assist with coding, search documents and support complex workflows much faster than a person working alone.
