NewsSOS
North Korea's Kimsuky hacking group is using generative AI to produce phishing documents targeting the cryptocurrency and financial sectors, according to reporting on the group's current operations.
The phishing lures are built around digital assets, investment strategies, and fintech services. That subject-matter specificity makes them harder to dismiss as generic spam.
The mechanism The pivot to generative AI is about document quality. Kimsuky is using the technology at the lure-production stage, generating phishing materials with content themes drawn from the crypto and fintech world.
A phishing document about portfolio rebalancing or a fintech product update reads differently to a crypto-desk professional than a generic credential-harvesting page. It slows the instinctive rejection.
Keep reading