Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development - The Hacker News

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development Swati KhandelwalAug 10, 2026Cyber Espionage / Artificial Intelligence North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espionage groups has begun running artificial intelligence (AI) offline on its own servers, connecting document-search tools to files in its possession, and collecting the software parts needed to build AI into its malware. South Korean security firm Genians says it uncovered the setup after months of tracking and log analysis on infrastructure tied to Kimsuky, a hacking unit under North Korea's Reconnaissance General Bureau. Genians found no evidence that the group had trained an AI model of its own, and the firm does not offer that as reassurance. It describes an actor in a "research and knowledge acquisition" stage, assembling and testing existing tools rather than making new models, with the apparent aim of folding AI through the operation, from writing malware to analyzing data. For an intelligence unit that has spent years phishing government, research, and other strategic targets, that points to attacks that are quicker to prepare and harder to spot. With nothing here to patch, the weight lands on defenders. Once AI writes the bait, the tells they once relied on weaken: stilted translation, clumsy formatting, spelling mistakes. What an intrusion does on the machine becomes the thing to watch. Genians' report tells defenders to correlate LNK execution, PowerShell, hidden scheduled tasks, GitHub traffic, and later payload activity instead of judging a lure mainly by how polished it looks. The core evidence is tools for running language models offline: Ollama, GPT4All and Msty, all found on infrastructure Genians linked to the group. The report says they were run or configured, not merely downloaded: Ollama generated the keys created on first launch, while GPT4All carried a configured localdocs_v3.db, the database used by its LocalDocs retrieval-augmented generation (RAG) feature. RAG lets a model answer from a private collection of documents. The database is evidence that the actor tried to connect documents in its possession to an AI system; it does not establish that those documents were stolen. The researchers separately recovered an operator request to check a data set for wallet details, Gmail credentials and site-registration history, ending, "The more detailed the analysis, the better. Please do not do it haphazardly." The report could not confirm that this particular request was submitted to an AI service. The group did not stop at ready-made apps. On the same infrastructure, the firm found developer libraries including LLaMaSharp, Microsoft's Semantic Kernel and Microsoft.Agents.AI, components for building AI functions into custom C# and .NET software. It also found OpenAI's Whisper speech-to-text files with a guide on extracting text from audio, and active traces of Cursor, an AI-powered coding editor. None of these tools is exotic. What is new is a nation-state espionage group assembling them on purpose to push AI deeper into its own attack workflow. The activity extends a Kimsuky campaign Genians calls Operation GitPower, which abuses GitHub repositories as command channels in an LNK-to-PowerShell infection chain and has distributed encrypted AsyncRAT payloads disguised as image files Fortinet separately documented the broader GitHub-C2 pattern in April in attacks targeting South Korean users. That report corroborates the surrounding technique family, not Genians' new local-AI artifacts; Reuters said the new findings could not be independently verified. The newly observed offline stack (the local models, RAG database, and transcription tools) has not been shown running against a victim in the reporting to date, and no GitPower victim count has been disclosed. Set against the broader "AI attack tools" framing, that is a narrower near-term change than the label implies, with the groundwork for automating parts of the operation still being laid. Genians ties the operation to Kimsuky using overlaps with earlier campaigns, infrastructure clues, and North Korean vocabulary recovered from operator logs. The U.S. Treasury, which sanctioned Kimsuky in 2023, describes it as subordinate to the Reconnaissance General Bureau and primarily focused on intelligence collection. The step also fits a pattern Genians flagged in 2025, when it linked Kimsuky to a spear-phishing attack that used ChatGPT-generated images of South Korean military employee ID cards. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. SHARE     Tweet Share Share SHARE  artificial intelligence, cyber espionage, endpoint security, Malware, Phishing, Remote Access Trojan, Social Engineering, Threat Detection, Threat Intelligence ⚡ Top Stories This Week Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures ⭐ Featured Resources Get the 2026 CISO Benchmark Report Based on 600 Security Leaders Get the Checklist for Gaining Control of AI Use Across Your Organization Download the 5-Step Action Plan for AI-Speed Exploitation [Webinar] How Militaries Can Trust the Data Behind Autonomous Missions