A report from the South Korean cybersecurity firm Genians has highlighted a shift in the operational tactics of the North Korean state-sponsored hacking group known as Kimsuky. According to the firm, the group has begun developing and deploying artificial intelligence tools specifically designed to automate various stages of cyberattacks.

The primary concern raised by the report is the group's ability to run these AI models locally on compromised devices. By executing these models within the infected system rather than relying on external cloud-based services, the hackers can perform malicious activities without triggering the network-level alerts typically used to detect unauthorized data traffic or external command-and-control communication. This method of 'local execution' makes the attacks significantly harder for traditional security software to identify and block.

While the report identifies the technical capability of these tools, it does not provide specific details on the scale of the attacks or the specific targets currently being impacted. The findings underscore a growing trend in the cybersecurity landscape where state-affiliated actors are increasingly leveraging generative AI to improve the efficiency and stealth of their digital operations. As of now, there has been no official response from North Korean authorities regarding these allegations, which is consistent with the country's standard policy of denying involvement in international cyber operations.