Kimsuky Integrates AI into Attack Operations, From AI-Generated Decoy Documents to a Local LLM

The Kimsuky threat group is systematically integrating AI—including local large language models, generative AI for decoy documents, and automation frameworks—across its attack operations, signaling a significant escalation in the sophistication and scale of North Korea-linked cyber campaigns.