Foresight News reports, citing Reuters, that South Korean cybersecurity company Genians said the North Korean hacker group Kimsuky has set up tools for locally running and managing AI models, including Ollama, GPT4All, Msty, and others. It has also collected information on retrieval-augmented generation (RAG) techniques, AI agent development frameworks, speech-to-text software, and AI-assisted coding tools such as Cursor. These tools can process documents locally, helping avoid transmitting sensitive information to external AI services. Currently, Kimsuky is integrating AI models into malware development, data analysis, and attack automation to enhance the level of cyberattacks.

Foresight News: Previously, network security company Kaspersky released a threat report stating that the North Korean hacker group Kimsuky has used the “Durian” malware in a series of attacks targeting at least two cryptocurrency companies.