{"slug": "north-koreas-hackers-using-ai-for-attacks-cybersecurity-firm-says", "title": "North Korea’s hackers using AI for attacks, cybersecurity firm says", "summary": "North Korean state-backed hacking group Kimsuky has used AI-generated documents in spear-phishing attacks against military, diplomatic, and academic targets since 2026, according to a report released Monday by South Korean cybersecurity firm Genians. The group used open-source tools such as Ollama, GPT-4All, and Msty to run large language models offline, enabling automated creation of malicious files disguised as legitimate documents. Genians warned that AI enables the automation and large-scale production of social engineering attacks, while North Korean hackers stole over $2bn in cryptocurrency in the first nine months of 2025, per blockchain analytics firm Elliptic.", "body_md": "# North Korea’s hackers using AI for attacks, cybersecurity firm says\n\n*Hacking group Kimsuky using AI-generated documents in spear-phishing attacks, South Korean cybersecurity firm says.*\n\nNorth Korean state-backed hackers are using artificial intelligence to bolster cyberattacks against targets in the military, diplomacy and academia, a report has found.\n\nKimsuky, a hacking group linked to North Korea’s intelligence services, has used AI-generated documents in a “pattern” of spear-phishing attacks since 2026, the South Korean cybersecurity firm Genians said in the report released on Monday.\n\n## Recommended Stories\n\nlist of 4 items- list 1 of 4\n[US president says he is using economic pressure, not strikes, on Iran](/economy/2026/8/10/trump-signals-shift-to-economic-pressure-on-iran-over-new-military-strikes) - list 2 of 4\n[Brazilian player falls into tunnel celebrating goal](/video/newsfeed/2026/8/10/brazilian-player-falls-into-tunnel-celebrating-goal) - list 3 of 4\n[Trump names Will Scharf as White House counsel ahead of midterms](/news/2026/8/10/trump-names-will-scharf-as-white-house-counsel-ahead-of-midterms) - list 4 of 4\n[Wildfires bear down on homes in Canada’s Okanagan region](/video/newsfeed/2026/8/10/wildfires-bear-down-on-homes-in-canadas-okanagan-region)\n\nThe attacks have used AI to automate the creation of malicious files disguised as legitimate documents, such as research reports and invitations, Seoul-based Genians said.\n\nTo avoid detection, Kimsuky has used open-source tools such as Ollama, GPT-4All, and Msty to run large language models without an internet connection, according to the report.\n\n“AI can generate highly polished documents on a wide range of topics within a short period of time, making it a highly efficient tool for threat actors,” Genians said.\n\n“This change is noteworthy because it goes beyond a shift in how decoy documents are created and demonstrates that AI can enable the automation and large-scale production of social engineering attacks.”\n\nKimsuky and other North Korean state-linked groups have been blamed for numerous cyberattacks in recent years, many of them aimed at extracting financial gains.\n\nNorth Korean hackers stole cryptocurrency worth more than $2bn in the first nine months of 2025, according to a report by British blockchain analytics firm Elliptic.\n\nIn 2014, North Korea was identified by US authorities as the culprit in the hacking of Sony Pictures, which drew Pyongyang’s ire by lampooning North Korean leader Kim Jong Un in the comedy film “The Interview”.\n\nJenny Town, a senior fellow at the Stimson Center in Washington, DC, said the development was not surprising given North Korea’s history of cyberattacks.\n\n“North Korea’s hackers and programmers are more than capable of utilising and exploiting various AI tools to enhance their efforts,” Town told Al Jazeera.\n\n“This is a new reality of all threat actors; North Korea is no exception.”\n\nThe cybersecurity report comes as rapid advances in AI stoke fears about the potential for harm by bad actors and systems going rogue.\n\nUS researchers last week announced that they used [AI to create viruses not found in nature](/economy/2026/8/7/ai-used-to-create-viruses-not-found-in-nature-for-first-time) for the first time, raising hopes for potential advances in medical treatments but also concerns about dangers.\n\nMark T. Hofmann, a criminal and intelligence analyst who specialises in cybercrime, said AI had led to a seismic shift in cybercrime by lowering the bar for bad actors to carry out malicious activity.\n\n“You no longer need hacking skills or a master’s degree in computer science. All you need is a computer and a motive,” Hofmann told Al Jazeera.\n\n“Threat actors all around the world will use more and more generative AI and, much worse, AI agents to accelerate their cyberattacks,” Hofmann added.\n\n“The dark side of AI is one of the main challenges of this decade. AI-supported cyberattacks will become a regular phenomenon.”", "url": "https://wpnews.pro/news/north-koreas-hackers-using-ai-for-attacks-cybersecurity-firm-says", "canonical_source": "https://www.aljazeera.com/economy/2026/8/10/north-koreas-hackers-using-ai-for-attacks-cybersecurity-firm-says?traffic_source=rss", "published_at": "2026-08-10 07:59:04+00:00", "updated_at": "2026-08-10 08:09:19.910501+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-safety", "ai-policy"], "entities": ["Kimsuky", "Genians", "Ollama", "GPT-4All", "Msty", "Elliptic", "Stimson Center", "Jenny Town"], "alternates": {"html": "https://wpnews.pro/news/north-koreas-hackers-using-ai-for-attacks-cybersecurity-firm-says", "markdown": "https://wpnews.pro/news/north-koreas-hackers-using-ai-for-attacks-cybersecurity-firm-says.md", "text": "https://wpnews.pro/news/north-koreas-hackers-using-ai-for-attacks-cybersecurity-firm-says.txt", "jsonld": "https://wpnews.pro/news/north-koreas-hackers-using-ai-for-attacks-cybersecurity-firm-says.jsonld"}}