{
  "id": 436244,
  "title": "North Korean hacking group builds AI tools for cyberattacks, report says",
  "url": "https://urgent.news/2026/08/10/north-korean-hacking-group-builds-ai-tools-for-cyberattacks-report-436244",
  "topic": "ai",
  "section": "AI",
  "published": "2026-08-10T03:14:00.000Z",
  "source": {
    "name": "Japan Times",
    "slug": "japan-times",
    "url": "https://www.japantimes.co.jp/news/2026/08/10/asia-pacific/north-korea-hacking-ai-tools/"
  },
  "original_language": "en",
  "account": "Seoul – A South Korean cybersecurity firm has uncovered evidence that a North Korean hacking group, Kimsuky, has developed artificial intelligence tools for cyberattacks, document analysis and phishing campaigns. The firm, Genians, discovered Kimsuky had set up local infrastructure to manage and run AI models such as Ollama, GPT4All and Msty, alongside retrieval augmented generation technology. The tools, according to Genians, could enable operators to process sensitive documents without sending them to external AI services. The company also found AI agent development frameworks, speech-to-text software and an AI-assisted coding tool called Cursor on the infrastructure linked to Kimsuky's operations. These findings suggest that Kimsuky is moving from using AI to generate phishing lures to integrating existing AI models into malware development, data analysis and attack automation. Additionally, Genians found finance and cryptocurrency-themed decoy documents that appeared to be AI-generated, designed to mimic legitimate investment reports and workplace documents. However, these findings cannot be independently verified, and North Korea has a history of using state-linked cyber units for espionage, financial theft and revenue generation. In 2023, the U.S. Treasury sanctioned Kimsuky as a North Korean government-controlled cyber-espionage group due to its role in gathering intelligence in support of Pyongyang’s strategic objectives.",
  "summary": "The group reportedly collected software that could help automate cyberattacks, analyze stolen material and produce better phishing campaigns.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 5,
    "also_reported_by": [
      {
        "outlet": "Free Malaysia Today",
        "title": "Report says North Korean hacking group builds AI tools for cyberattacks",
        "url": "https://urgent.news/2026/08/10/report-says-north-korean-hacking-group-builds-ai-tools-for",
        "published": "2026-08-10T01:35:13.000Z"
      },
      {
        "outlet": "The Indian Express",
        "title": "North Korean hacking group builds AI tools for cyberattacks: Report",
        "url": "https://urgent.news/2026/08/10/north-korean-hacking-group-builds-ai-tools-for-cyberattacks-report",
        "published": "2026-08-10T03:55:31.000Z"
      },
      {
        "outlet": "NDTV",
        "title": "North Korean Hackers Develop AI Tools To Automate Cyberattacks: Report",
        "url": "https://urgent.news/2026/08/10/north-korean-hackers-develop-ai-tools-to-automate-cyberattacks-report",
        "published": "2026-08-10T05:36:30.000Z"
      },
      {
        "outlet": "Economic Times Tech",
        "title": "North Korean hacking group builds AI tools for cyberattacks, report says",
        "url": "https://urgent.news/2026/08/10/north-korean-hacking-group-builds-ai-tools-for-cyberattacks-report-462059",
        "published": "2026-08-10T11:04:42.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}