North Korean hackers are running AI locally to industrialize spear phishing

AI is being inserted into an established operation

Kimsuky has long been associated with intelligence collection and spear phishing. Genians says the group is now using AI-generated documents disguised as research reports, invitations, and other legitimate material aimed at military, diplomatic, and academic targets.

The technology does not replace targeting, access, or operational knowledge. It makes one costly part of the campaign, producing credible and varied social-engineering material, faster and easier to scale.

Local models remove the provider chokepoint

According to the report, the hackers used tools such as Ollama, GPT4All, and Msty to run large language models without an internet connection. Local operation can protect the attacker's prompts and data from a commercial provider's abuse detection, account controls, logging, and shutdown authority.

That does not mean open tools are uniquely malicious. The same properties support privacy, research, resilience, and national sovereignty. They also mean defense cannot depend on a central provider noticing abuse.

Polish is no longer evidence of legitimacy

AI can produce professional documents across topics and languages at low cost. Familiar formatting, fluent prose, institutional vocabulary, and a plausible invitation can therefore be generated without the sender possessing the claimed identity or relationship.

Organizations should assume that high-quality lures will become routine. Training people to spot awkward grammar is insufficient when language generation can remove the traditional warning signs.

Move trust from appearance to verification

High-risk institutions need verified sender identities, signed documents, safe attachment handling, link isolation, least-privilege accounts, multifactor authentication, unusual-access detection, and rapid reporting channels. Diplomatic, military, and academic networks should share indicators without exposing sensitive investigations.

The defensive shift is simple to state and difficult to implement: do not trust the document because it looks right. Trust only the identity, provenance, behavior, and access path that can be independently verified.

• Digitally sign sensitive invitations, reports, and operational documents.
• Verify unusual requests through a separate trusted channel.
• Isolate attachments and links from privileged accounts and networks.
• Share campaign indicators across military, diplomatic, academic, and private-sector defenders.