tomorrowread
North Korea’s hackers are now using AI to industrialize phishing
World·Short term·▼ -4%

North Korea-linked hackers will accelerate AI phishing, pushing defenders to treat offline model abuse as standard tradecraft.

This is a clear escalation in cyber tradecraft. If offline AI tools are becoming standard in state-linked attacks, defenders will need to assume more convincing lures, faster campaign volume and harder attribution.

AI reasoning

This is a clear escalation in cyber tradecraft. If offline AI tools are becoming standard in state-linked attacks, defenders will need to assume more convincing lures, faster campaign volume and harder attribution.

Curated summary

South Korean cybersecurity firm Genians says North Korean state-backed hackers are using AI to supercharge spear-phishing against military, diplomatic and academic targets. The report says Kimsuky has used AI-generated documents since 2026 and relied on offline tools such as Ollama, GPT-4All and Msty to keep models off the internet and out of sight. The shift suggests AI is moving from a productivity tool to a core enabler of cyber espionage.

Supporting evidence

Source news

North Korea’s hackers are now using AI to industrialize phishing

A South Korean security firm says Kimsuky is generating fake documents and running models offline to dodge detection.

Al Jazeera – Breaking News, World News and Video from Al Jazeera·1h ago
Read full article at Al Jazeera – Breaking News, World News and Video from Al Jazeera

Related predictions