NK hacking group Kimsuky used AI coding agents to create decoys: report
North Korea-linked hacking group Kimsuky was found to have leveraged artificial intelligence (AI) coding agents to create decoys for malicious codes, a local security firm said Monday. Such findings were detected after an analysis of 13 malicious files collected last month, Genians Inc. said in its latest cybersecurity threat intelligence report. According to the report, researchers found that…
North Korean hacking group Kimsuky allegedly utilized artificial intelligence (AI) coding agents to generate deceptive components for their malicious software, according to a recent report by Genians Inc., a cybersecurity firm. This revelation emerged following an assessment of 13 malicious files collected last month. The researchers discovered that Kimsuky had circulated emails containing compressed files with documents titled like insurance bills or policy fund notices.
Upon clicking these documents, the malware would be activated. The files exhibited signs of being created by an open-source AI coding tool known as opencode. In certain PDF files, both the "creator" and "producer" fields in the metadata were listed as opencode, which is atypical for documents generated using standard software, implying that they were likely produced by an AI agent through programming rather than manual creation. This marks the initial instance that Genians has identified such activity by Kimsuky.
Written by urgent.news from The Korea Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
