Kimsuky deploys offline AI stack for phishing and malware development

Security firm Genians identified the North Korean hacking group Kimsuky using Ollama, GPT4All, and Msty to run local RAG-based document analysis. The group is using these offline tools to automate malware creation and generate more convincing phishing lures.