{
  "id": 431293,
  "title": "Report says North Korean hacking group builds AI tools for cyberattacks",
  "url": "https://urgent.news/2026/08/10/report-says-north-korean-hacking-group-builds-ai-tools-for-431293",
  "topic": "ai",
  "section": "AI",
  "published": "2026-08-10T01:35:13.000Z",
  "source": {
    "name": "Free Malaysia Today",
    "slug": "free-malaysia-today",
    "url": "https://www.freemalaysiatoday.com/category/world/2026/08/10/report-says-north-korean-hacking-group-builds-ai-tools-for-cyberattacks"
  },
  "original_language": "en",
  "account": "A South Korean cybersecurity firm has uncovered evidence that a North Korean hacking group, Kimsuky, has developed artificial intelligence tools for cyberattacks, according to a report on Monday. The firm, Genians, discovered Kimsuky had set up large language model tools and software that could automate cyberattacks, analyze stolen data, and create more convincing phishing campaigns. The tools included Ollama, GPT4All, Msty for running and managing AI models locally, retrieval augmented generation technology for document search, speech-to-text software, and an AI-assisted coding tool named Cursor. These tools would allow Kimsuky operators to process documents without transmitting sensitive information to external AI services. The report also revealed finance and cryptocurrency-themed decoy documents that appeared to have been generated using AI to resemble legitimate investment reports. While these findings could not be independently verified, the cybersecurity firm's investigation suggests Kimsuky is advancing beyond using generative AI for phishing lures, integrating existing AI models into malware development, data analysis, and attack automation. North Korea has long employed state-linked cyber units for espionage, financial theft, and revenue generation, as reported by US and South Korean authorities, as well as cybersecurity experts. In 2023, the US Treasury sanctioned Kimsuky, classifying it as a North Korean government-controlled cyber-espionage group responsible for intelligence gathering to support Pyongyang's strategic objectives.",
  "summary": "Findings suggest the group expanded AI use beyond phishing lures into malware development, data analysis and attack automation.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 6,
    "also_reported_by": [
      {
        "outlet": "Free Malaysia Today",
        "title": "Report says North Korean hacking group builds AI tools for cyberattacks",
        "url": "https://urgent.news/2026/08/10/report-says-north-korean-hacking-group-builds-ai-tools-for",
        "published": "2026-08-10T01:35:13.000Z"
      },
      {
        "outlet": "Japan Times",
        "title": "North Korean hacking group builds AI tools for cyberattacks, report says",
        "url": "https://urgent.news/2026/08/10/north-korean-hacking-group-builds-ai-tools-for-cyberattacks-report-436244",
        "published": "2026-08-10T03:14:00.000Z"
      },
      {
        "outlet": "The Indian Express",
        "title": "North Korean hacking group builds AI tools for cyberattacks: Report",
        "url": "https://urgent.news/2026/08/10/north-korean-hacking-group-builds-ai-tools-for-cyberattacks-report",
        "published": "2026-08-10T03:55:31.000Z"
      },
      {
        "outlet": "NDTV",
        "title": "North Korean Hackers Develop AI Tools To Automate Cyberattacks: Report",
        "url": "https://urgent.news/2026/08/10/north-korean-hackers-develop-ai-tools-to-automate-cyberattacks-report",
        "published": "2026-08-10T05:36:30.000Z"
      },
      {
        "outlet": "Economic Times Tech",
        "title": "North Korean hacking group builds AI tools for cyberattacks, report says",
        "url": "https://urgent.news/2026/08/10/north-korean-hacking-group-builds-ai-tools-for-cyberattacks-report-462059",
        "published": "2026-08-10T11:04:42.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}