Kimsuky Builds Offline AI Stack to Boost Phishing and Malware Operations
North Korea's Kimsuky hacking group, operating under the Reconnaissance General Bureau, has been assembling an offline artificial intelligence (AI) stack on its…
Tag: AI
GPT4All: Local AI Model Platform
GPT4All is a platform for running AI models locally, featuring LocalDocs RAG. Kimsuky configured its localdocs_v3.db, suggesting attempts to connect private documents…
Msty: AI Chat Interface
Msty is an AI chat interface that supports local models. It was found on Kimsuky's infrastructure, part of their offline AI stack.
LLaMaSharp: .NET Binding for LLaMA
LLaMaSharp is a .NET binding for LLaMA, enabling AI model integration in C# applications. Its presence indicates Kimsuky's interest in building AI…
HTTP Terminator: AI-Powered HTTP Desync Research Tool
HTTP Terminator is an open-source AI-assisted research system built by James Kettle at PortSwigger. It generated 30,000 candidate attack vectors from RFC…
Black Hat USA 2026: AI Agent Vulnerabilities Revealed
Black Hat USA is a major cybersecurity conference. At the 2026 event, Novee Security presented findings on vulnerabilities in AI coding agents…
DeepSeek: AI Model Used in Offensive Operations
DeepSeek is an AI model leveraged by threat actors as an offensive operator to automate hacking tasks.
Hugging Face Diffusers Library
Diffusers is a Python library for state-of-the-art pretrained diffusion models used to generate videos, images, and audio. It is widely downloaded and…
Qwen Code: AI Coding Model
Qwen Code is an AI coding model by Alibaba. Unit 42 observed limited use of Qwen Code in the Hermes Agent operation,…
Chinese Hacker Uses DeepSeek via Telegram to Drive Autonomous Attacks
Palo Alto Networks' Unit 42 has uncovered a Chinese-speaking threat actor who leveraged the DeepSeek AI model through the open-source Hermes Agent…