North Korea’s Kimsuky Turns to AI as Crypto Firms Face New Threats

🤖 Kimsuky is developing local AI environments to enhance its cyberattack capabilities, specifically targeting the cryptocurrency and financial sectors, using tools like Ollama and GPT4All to minimize data exposure.

📊 The group is integrating AI into its operations, evidenced by attempts to connect documents to AI systems for knowledge sourcing, and collecting libraries for automated agents and document retrieval.

💰 North Korea-linked attackers accounted for over 55% of cryptocurrency thefts in the first half of 2026, with significant losses tied to state-sponsored groups, highlighting their ongoing threat to the crypto industry.