North Korean Hackers Are Using AI to Target Crypto Assets

South Korean cybersecurity experts report that the Kimsuky hacking group is actively integrating artificial intelligence into its operations. This state sponsored unit, which operates under North Korea, has been caught setting up local AI tools like Ollama and Msty. By running these models on their own hardware, the hackers avoid sending sensitive data to external servers.

Investigators found that the group is using AI to draft sophisticated decoy documents that mimic professional investment reports. These fake files often target cryptocurrency executives and engineers. The group is also exploring AI to speed up malware development and automate the analysis of stolen data.

This shift is a major concern for the crypto industry. The use of speech to text software and information retrieval systems helps the hackers quickly sift through large amounts of stolen data to find valuable assets. While there is no proof that they have built their own unique models, their focus on automating attacks could make future breaches more frequent.

Security professionals are now monitoring how these groups combine AI with traditional phishing methods. For users and companies, this update serves as a reminder to be extra careful with documents that look like official investment reports. Staying updated on these changing tactics is vital for keeping digital wallets secure.