Skip to content
archiveAPT / state · 10 Aug 2026 · 13:19 UTC

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

last 60 dispatches · spectrum

North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espionage groups has begun running artificial intelligence (AI) offline on its own servers, connecting document-search tools to files in its possession, and collecting the software parts needed to build AI into its malware. …

grounded ✓primary source ↗

loading threat intel…

Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected