朝鲜黑客组织 Kimsuky将 AI 武器化,针对加密货币领域发动更隐蔽网络攻击
深潮 TechFlow 消息,8 月 11 日,据 Bitcoin.com 报道,网络安全公司 Genians Security Center 发布分析报告称,朝鲜侦察总局下属黑客组织 Kimsuky 正在构建并测试一套以 AI 为核心的网络攻击工具体系。研究人员在其基础设施中发现了 Ollama、GPT4All、Msty 三个本地 AI 平台的部署痕迹,以及 Microsoft Semantic Kernel、LLaMaSharp等 AI 开发框架组件,表明该组织正在系统性开发专用 AI 攻击工具,而非仅作临时性尝试。自 2026 年初起,Kimsuky 已将生成式 AI 制作的高质量文档用于针对虚拟资产、金融投资及游戏开发领域的鱼叉式网络钓鱼攻击,AI 生成的专业文档大幅降低了传统识别钓鱼邮件的有效性。攻击载体为伪装成合法文档的 ZIP 压缩包,内含恶意 LNK 文件,触发后可在后台静
North Korea's Kimsuky weaponizes AI for stealthier crypto-targeted cyberattacks
TechFlow citing Bitcoin.com: Cybersecurity firm Genians Security Center reports North Korea's Kimsuky hacker group is building and testing an AI-powered attack toolkit. Researchers found deployment traces of Ollama, GPT4All, and Msty local AI platforms, plus Microsoft Semantic Kernel and LLaMaSharp AI dev frameworks—indicating systematic development of dedicated AI attack tools. Since early 2026, Kimsuky has used generative AI to produce high-quality documents for spear-phishing against virtual assets, financial investment, and game development sectors.