NK hacking group Kimsuky used AI coding agents to create decoys: report
North Korea-linked hacking group Kimsuky was found to have leveraged artificial intelligence (AI) coding agents to create decoys for malicious codes, a local security firm said Monday. Such findings were detected after an analysis of 13 malicious files collected last month, Genians Inc. said in its latest cybersecurity threat intelligence report. According to the report, researchers found that…
North Korea's hacking group Kimsuky was found to have utilized artificial intelligence (AI) coding agents to generate decoys for malicious codes, according to a local security firm's latest cybersecurity threat intelligence report. The report, released by Genians Inc., analyzed 13 malicious files collected last month and detected the use of AI agents.
The hacking group distributed emails with compressed files containing documents with titles like insurance bills or policy fund notices. When users clicked on these files, malware would activate. The files contained evidence of being created by an open-sourced AI coding agent called opencode. In some PDF documents, both the creator and producer fields in the metadata were listed as opencode.
These values are not typically generated with standard document creation software, suggesting the documents were generated by an AI agent through programming rather than manually. This marks the first time Genians has detected such an AI-generated tactic by Kimsuky.
Written by urgent.news from The Korea Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
