Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

North Korea's state-sponsored hackers are enhancing their capabilities by utilizing artificial intelligence offline on their own servers. This allows them to connect document-search tools to their existing files and gather software components to integrate AI into their malware. A South Korean security firm, Genians, discovered this development, which is attributed to one of North Korea's primary espionage groups. The group, known as Kimsuky, is reportedly leveraging this technology to improve phishing efforts and automate malware development. This shift indicates a notable advancement in the group's tactics, moving beyond reliance on public chatbots. The use of offline AI is expected to boost the sophistication of their malicious activities.