North Korea’s Kimsuky Turns to AI as Crypto Firms Face New Threats

Share:
North Korea-linked threat actor Kimsuky has set up local LLM environments using Ollama, GPT4All and Msty to integrate AI into its cyberattack operations targeting the cryptocurrency and financial sectors. By running models locally to avoid sending conversation data to external AI services, the group reduces exposure and detection risk, increasing security threats to crypto exchanges (CEX), DeFi platforms and token fundraising.
Kimsuky has been setting up local AI environments as it looks for ways to bring artificial intelligence into its cyberattack operations. The North Korea-linked threat actor, which has frequently targeted the cryptocurrency and financial sectors, was found to have established local LLM environments using Ollama, GPT4All, and Msty.
Genians said the local approach prevents conversation data from being transmitted to external AI services, thereby reducing the risk of external exposure.
Read More


