Integrating AI into Attack Operations, From AI-Generated Decoy Documents to a Local LLM

Reported 10 Aug 2026 by otx · Severity: high

The Kimsuky threat group has integrated artificial intelligence capabilities into its attack operations, establishing local large language model environments using Ollama, GPT4All, and Msty. Evidence indicates the group is accumulating technologies to incorporate AI across attack