North Korean hackers Kimsuky weaponize AI for stealthy crypto cyberattacks

icon MarsBit
Share
AI summary iconSummary
North Korean hackers linked to Kimsuky are using AI to conduct stealthy crypto attacks, according to the Genians Security Center. Since early 2026, the group has employed AI platforms such as Ollama and GPT4All, embedding AI-generated documents into spear-phishing campaigns targeting liquidity providers and crypto markets. ZIP files containing malicious LNK scripts silently execute PowerShell commands, focusing on virtual assets and game development. These tactics underscore the urgent need for stronger CFT measures to prevent malicious actors from exploiting financial systems.

Huo Xing Finance reports, according to Bitcoin.com, that cybersecurity firm Genians Security Center has released an analysis report stating that Kimsuky, a hacking group affiliated with North Korea’s Reconnaissance General Bureau, is actively building and testing a network attack system centered on AI. Researchers have found traces of deployment for three local AI platforms—Ollama, GPT4All, and Msty—as well as components from AI development frameworks such as Microsoft Semantic Kernel and LLaMaSharp, indicating that the group is systematically developing specialized AI-powered attack tools rather than making ad hoc attempts. Since early 2026, Kimsuky has been using high-quality documents generated by generative AI in spear-phishing attacks targeting virtual assets, financial investments, and game development sectors; AI-generated professional documents have significantly reduced the effectiveness of traditional phishing email detection. The attack vector consists of ZIP archives disguised as legitimate documents, containing malicious LNK files that silently execute PowerShell commands in the background upon activation.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.