North Korean Hackers Utilize AI for Enhanced Cyberattacks on Military and Academic Targets
A report by South Korean cybersecurity firm Genians has revealed that North Korean state-backed hackers, specifically the group Kimsuky, are employing artificial intelligence to enhance their cyberattacks. These attacks target military, diplomatic, and academic sectors. The hackers use AI-generated documents in spear-phishing attacks, automating the creation of malicious files disguised as legitimate documents. The report highlights the use of open-source tools like Ollama and GPT-4All to run large language models offline, making detection more challenging. This development marks a significant shift in the methodology of cyberattacks, allowing for the large-scale production of social engineering attacks.