Security researchers at Genians Security Center have uncovered a sophisticated new variant of the RoKRAT malware.

Konni APT group conducted a spear phishing attack by exploiting the redirection URL structure of the domain used for Google ad click tracking.

A group tracked as APT37 or ScarCruft is once again phishing South Korean organizations with national security interests, according to analysts at cybersecurity firm Genians.

North Korea-linked hackers carried out a spear-phishing campaign that used the South Korean messaging platform KakaoTalk to spread malware, according to a report Monday.

韓国のサイバーセキュリティー企業Ｇｅｎｉａｎｓが１０日に明らかにしたところによると、北朝​鮮政府系のハッカー集団「Ｋｉｍｓｕｋｙ」が大規模言語‌モデル（ＬＬＭ）ツールを構築し、サイバー攻撃の自動化、盗んだデータの分析、より説得力のあるフィッシン​グ攻撃の展開に役立つソフトウエアを収​集していた。

At a glance Actor: Kimsuky (suspected North Korea threat actor) Activity type: Spear phishing and AI experimentation Targets: Foreign diplomatic missions, military, security, and virtual asset sectors Scale: Undisclosed number of targeted victims Law-enforcement status: Allegedly state-sponsored; uncharged in this report Source: Genians Security Center TL;DR Genians Security Center uncovered Kimsuky AI operations involving local language models. The suspected threat actor allegedly uses these tools to build decoy documents.

North Korea's state hackers are no longer content to type prompts into public chatbots. One of the country's main espionage groups has begun running artificial intelligence (AI) offline on its own servers, connecting document-search tools to files in its possession, and collecting the software parts needed to build AI into its malware. South Korean security firm Genians says it uncovered the

A group tracked as APT37 or ScarCruft is once again phishing South Korean organizations with national security interests, according to analysts at cybersecurity firm Genians.

A group tracked as APT37 or ScarCruft is once again phishing South Korean organizations with national security interests, according to analysts at cybersecurity firm Genians.

韓国のセキュリティ企業Geniansの調査で、北朝鮮のハッカー集団KimsukyがOllamaやGPT4Allなどの大規模言語モデル管理ツールをローカル環境に構築し、サイバー攻…

The North Korean state-sponsored hacking group known as ScarCruft (aka APT37) has been observed using spear-phishing messages impersonating Microsoft Account security notifications to deliver malware called NarwhalRAT. "The attack email contained a message impersonating an MS account security alert," the Genians Security Center (GSC) said. "It was designed to create concern over possible

A North Korean hacking group has built tools using large language models and collected software that could help automate cyberattacks, analyse stolen data and create more convincing phishing campaigns, a South Korean cybersecurity firm said on Monday. Genians said it found evidence that the North Korean-linked group Kimsuky had established tools to run and manage artificial intelligence models locally, including Ollama, GPT4All and Msty. The group also used retrieval augmented generation (RAG), a technology that allows AI systems to retrieve information from documents and other data sources when generating responses, Genians said.