North Korean hacking group builds AI tools for cyberattacks: Report

A South Korean cybersecurity firm, Genians, has reported that a North Korean hacking group, Kimsuky, has developed AI tools for cyberattacks. These tools include large language model software and retrieval augmented generation technology, which could automate cyberattacks, analyse stolen data, and create more convincing phishing campaigns.

Additionally, Genians discovered AI agent development frameworks, speech-to-text software, and an AI-assisted coding tool on infrastructure linked to the group. The firm also found finance and cryptocurrency-themed decoy documents that were likely generated with AI. These findings suggest that Kimsuky is expanding its use of generative AI to integrate existing models into malware development, data analysis, and attack automation.

The findings cannot be independently verified, and North Korea's state-linked cyber units have been used for espionage, financial theft, and revenue generation for years. The U.S. Treasury sanctioned Kimsuky in 2023 as a North Korean government-controlled cyber-espionage group.

Brief written by urgent.news from The Indian Express's own syndicated text. Machine-written — it may contain errors, so check the original before relying on it.