North Korean Hackers Leverage Local AI Environments for Crypto Attacks

A North Korea-linked hacking group known as Kimsuky has built three local AI environments using open-source tools to automate attacks on cryptocurrency and financial companies, according to cybersecurity research.

The group has been using these AI environments for malware development, data analysis, and attack automation. Researchers found that Kimsuky had also created AI-generated phishing material targeting crypto, investment, and fintech firms, with documents so polished they closely copied material from a Korean AI-powered investment platform.

This is not the first time North Korea-linked groups have used AI to target the cryptocurrency industry. In July, another group called BlueNoroff was found to be operating fake Zoom and Microsoft Teams meetings that profiled cryptocurrency users before malware was delivered.