This is one of the more interesting examples of AI becoming part of an APT's actual operational workflow, rather than just being used to rewrite phishing emails.

South Korean security firm Genians says it found evidence that Kimsuky, the North Korea-linked espionage group, had assembled a local AI environment that included:

• Ollama
• GPT4All
• Msty
• RAG-based document search
• AI agent frameworks
• Speech-to-text tooling
• Cursor

The obvious advantage is operational security.

Running models locally means operators can potentially process stolen documents, credentials, internal files, and targeting data without sending that material to an external AI provider.

Researchers also found signs that the tooling was actually being used, not just downloaded.

The campaign reportedly included:

• AI-generated finance and crypto-themed decoy documents
• Automated-looking document generation
• LNK and PowerShell-based delivery
• GitHub/Git repositories used for C2 and payload distribution
• Encrypted AsyncRAT payloads
• Queries related to Microsoft Defender
• Internal checks for exposed wallet seeds, Gmail credentials, and account data

One of the more revealing details is that researchers reconstructed some of the attackers' own keystrokes and matched them with translation activity.

Full research breakdown 👇
https://www.technadu.com/kimsuky-built-a-local-ai-lab-to-power-its-hacking-operations-left-behind-its-own-ai-chat-logs/633155/

Logs reportedly showed translated English text being pasted into a browser tab titled “ChatGPT - Google Chrome”, suggesting the operators were using both commercial AI services and their own local stack.

Genians says it found no evidence that Kimsuky trained its own models. The shift appears to be about integrating existing models into offensive workflows.

That may be the more important point anyway.

You don't need to train a frontier model if you can combine:
local LLMs + RAG + stolen data + agent frameworks + malware tooling.

Question for the community:

Do you think local LLM stacks will become standard infrastructure for mature threat groups?

And from a defender's perspective, which worries you more:

• AI-assisted phishing at scale
• Automated analysis of stolen data
• Agent-driven attack chains
• Local models that keep attacker data off third-party services