Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Kimsuky has been running AI offline on its own servers and connecting document-search tools to files in its possession, moving past simply typing prompts into public chatbots, according to South Korean security firm Genians.
- Genians found offline LLM tools on Kimsuky-linked infrastructure — Ollama, GPT4All, and Msty — with Ollama generating unique keys on first launch and GPT4All carrying a configured localdocs_v3.db RAG database that suggests the group tried to connect its own documents to an AI system.
- The same infrastructure also held developer libraries including LLaMaSharp, Microsoft's Semantic Kernel, and Microsoft.Agents.AI for building AI into C#/.NET software, plus OpenAI's Whisper speech-to-text files and active traces of the Cursor AI coding editor.
- The activity extends Operation GitPower, which abuses GitHub repositories as command channels in an LNK-to-PowerShell infection chain distributing encrypted AsyncRAT payloads disguised as image files.
- Genians found no evidence Kimsuky trained its own model, describing the group as in a "research and knowledge acquisition" stage, and Reuters noted the new local-AI findings could not be independently verified; the offline stack has not been shown running against a victim and no GitPower victim count has been disclosed.
- Fortinet separately documented the broader GitHub-as-C2 pattern in April in attacks targeting South Korean users, corroborating the surrounding technique family but not Genians' new AI artifacts.
Why it matters: Once AI writes the phishing bait, the tells defenders relied on — stilted translation, clumsy formatting, spelling mistakes — weaken, and intrusion behavior on the machine becomes the signal to watch. Genians specifically tells defenders to correlate LNK execution, PowerShell, hidden scheduled tasks, GitHub traffic, and later payload activity rather than judging lures by surface polish. The U.S. Treasury sanctioned Kimsuky in 2023 as subordinate to the Reconnaissance General Bureau, and the group has spent years phishing government, research, and other strategic targets.
Ask SkimNews
