North Korean hacker organization Kimsuki built local AI tools for cyber attacks

On 10 August, Reuters reported that the Korea Cybersecurity company Genians had indicated that the Korean hacker organization Kimsuki had built tools for local operation and management of AI models (including Ollama, GPT4All, Msty, etc.) and collected Retrieval Enhancement Generation (RAG) technology, the AI proxy development framework, voice-to-text software and the AA-assisted coding tool Cursor. These tools allow local processing of documents and avoid transmitting sensitive information to external AI services. Kimsuki is currently integrating the AI model into malicious software development, data analysis and attack automation to increase the level of cyberattack。