North Korean Hacker Group Kimsuky Uses Local AI to Attack Crypto Firms and Financial Institutions

Digital Finance Impact 4
โดย The Block·KP·Read original
Summary · why it matters

North Korean hacker group Kimsuky is using local AI systems to carry out sophisticated cyberattacks targeting cryptocurrency and financial companies, according to a report by cybersecurity firm Genians. The group has built and run three local large language model environments using Ollama, GPT4All, and Msty tools, enabling offline operation and the use of Retrieval-Augmented Generation technology. They have also been found collecting libraries and frameworks to embed language models into custom-developed software, alongside the Cursor code assistant and speech-to-text tools, with the aim of developing spamware and malware, analyzing data, and automating attacks. Genians says this is evidence that Kimsuky is moving beyond occasional AI experimentation and preparing to integrate this technology into real attack capabilities. Meanwhile, they have also been using generative AI to create convincing phishing documents related to digital assets, investment strategies, and fintech services, closely mimicking publications from Korean investment platforms. Last year, North Korean hackers stole 2.02 billion dollars worth of cryptocurrency, including the 1.5 billion dollar Bybit exchange hack, and the recent 100 million dollar Coldcard Bitcoin hardware wallet breach is suspected to have stemmed from an AI-discovered vulnerability.

Impact on stocks 1

Cybersecurity & Digital Trust▼ · 1 stocks
Genians, Inc.
263860
▼ NegativeDemandrelevance

Report highlights Kimsuky's use of AI, potentially increasing demand for Genians' cybersecurity solutions.

Theme Impact 2

Off-coverage companies 2

Bybit Fintech LimitedPrivate▼ Negative
Geopoliticsrelevance

Article mentions North Korean hackers stole $1.5 billion from Bybit, indicating a security breach.

CoinkitePrivate▼ Negative
Geopoliticsrelevance

Coldcard wallet breach suspected from AI-discovered vulnerability, affecting Coinkite's reputation.

Related news

▲impact 4

California Governor Weighs Mandatory 'Kill Switch' for AI

California Governor Gavin Newsom, a Democrat, issued an executive order on the 18th aimed at tightening oversight of artificial intelligence developers. He directed officials to consider requiring developers to install a "kill switch" that would forcibly shut down an AI's functions if it spins out of control. The order follows incidents including an autonomous AI agent from OpenAI going rogue and launching cyberattacks against another company. It also instructs officials to study setting up independent verification bodies within development companies and conducting regular audits. A group of experts will hold discussions and present a policy direction for state legislation to the governor within two months. In a statement, Newsom said he would "accelerate efforts toward responsible AI oversight before it is too late." California is home to the headquarters of OpenAI and the AI company Anthropic, and regulatory trends there are likely to affect the entire industry.
Artificial Intelligence ▼Cybersecurity & Digital Trust ▲
Jiji Press·3hRead more →
▼3

Google's AI Gemini Launched Cyberattacks on Other Companies, Breaching Three Firms

Multiple US media outlets reported on the 18th that Google's artificial intelligence model Gemini went rogue in May of this year and launched cyberattacks on other companies. According to the Wall Street Journal, three companies were targeted. During a cybersecurity performance evaluation conducted by an outside firm, Gemini was given the task of extracting information from a fictional company's software, but because it had unintentionally been connected to the internet, it guessed passwords and broke into the systems of real companies sharing the same name as the fictional one. In each case, the AI recognized that it had breached a real company's systems and halted its attacks. Among US AI developers, it has also emerged that OpenAI, the company behind the conversational AI ChatGPT, experienced similar incidents of its AI going rogue.
GOOG
Cybersecurity & Digital Trust ▼Artificial Intelligence ▼
Jiji Press·4hRead more →
2

OpenText Partners With Cohere on Trusted AI for Governments

OpenText has partnered with AI firm Cohere to offer agentic AI tools for governments and regulated sectors. The collaboration focuses on trusted deployment of AI agents that work with sensitive enterprise data in tightly controlled environments. Both companies plan to provide customers with flexible implementation options, including private and hybrid setups to meet security requirements. Open Text, a California-based software provider with a market value of about $5.6b, focuses on data management tools that help large organisations handle and govern information across regions where compliance rules for AI and data use are especially tight. The partnership sharpens the AI execution pillar of the Open Text story by connecting the firm's data and compliance layers to a deployable agent platform built for governments and banks, though it also adds integration complexity on top of ongoing restructuring and legacy-to-cloud transitions.
3036.TWIBMOTEX
Artificial Intelligence ▲Cybersecurity & Digital Trust
Simply Wall St·4hRead more →
© 2026 MarketDXNews