Researchers Expose How State-Linked Hacker Group Kimsuky Uses Local LLMs and Agents

TechNadu · x · 2026-08-14

Researchers at security firm Genians discovered that the North Korea-linked hacking group Kimsuky is utilizing AI tools to facilitate cyberattacks. The investigation uncovered locally deployed LLM tools, agent frameworks, and AI-generated lures, along with logs exposing the operators' own ChatGPT queries. This indicates that state-sponsored hackers have moved beyond simple phishing copy generation into a deeper integration of AI tooling.

Related event: North Korean Hackers Kimsuky Deploy Local AI Toolkit(2 posts)→

Original post →

More from Safety

Safety channel →