Kimsuky Leverages AI in Cyberattacks on Crypto Exchanges

North Korea-linked threat actor Kimsuky has been using artificial intelligence (AI) to boost its cyberattack operations targeting the cryptocurrency and financial sectors. The group has set up local LLM environments using Ollama, GPT4All, and Msty to integrate AI into its attacks.

This approach allows Kimsuky to run models locally, avoiding the need to send conversation data to external AI services, thereby reducing exposure and detection risk.

Experts say this new tactic increases security threats to crypto exchanges (CEX), DeFi platforms, and token fundraising. Genians pointed out that local LLM environments prevent conversation data from being transmitted to external AI services.