A South Korean cybersecurity firm has released findings indicating that the North Korean state-sponsored hacking group known as Kimsuky is increasingly utilizing artificial intelligence to enhance its cyber-espionage operations. According to the report, the group is deploying AI-generated documents to conduct spear-phishing attacks, a method where hackers send personalized, deceptive emails to specific individuals or organizations to gain unauthorized access to data.

Spear-phishing has long been a primary tactic for Kimsuky, which is frequently linked to intelligence-gathering efforts against government officials, academics, and think tanks. By leveraging AI, the group is reportedly able to produce more convincing and professional-looking content, making it harder for targets to identify the fraudulent nature of the communications. While the report highlights the evolution of these tactics, it does not specify the exact scale of the current campaign or the specific identities of the individuals targeted in this latest wave of activity.

This development underscores a broader trend in global cybersecurity, where state-backed actors are adopting generative AI tools to improve the efficiency and success rates of their digital operations. The use of AI in this context allows for the rapid creation of tailored lures that mimic legitimate correspondence from trusted sources. Security experts have warned that as these tools become more accessible, the barrier to entry for sophisticated social engineering attacks continues to lower, posing a persistent challenge for organizations tasked with protecting sensitive information from foreign intelligence threats.