North Korean hacking group builds AI tools for cyberattacks, report says

A North Korean hacking group built large language model tools and collected software that could help automate cyberattacks, analyse stolen material and produce more convincing phishing campaigns, a South Korean cybersecurity firm said on Monday.

The cybersecurity firm, Genians, said it ‌found evidence ⁠that the ⁠North Korean-linked group Kimsuky had set up tools for running and managing AI models locally, including Ollama, GPT4All and Msty, alongside document search technology known as retrieval augmented generation (RAG).