Kimsuky used AI-made crypto, finance documents as phishing lures: Genians

North Korean hacking group Kimsuky used a local large language model to analyze stolen documents and appears to have tried to automate parts of its attack operations, according to a Genians analysis cited by IT Chosun. Kimsuky also used cryptocurrency- and finance-related documents generated with AI as spear-phishing lures, using files polished to the level of real business documents to trick users into running malicious software.