According to CoinMeta, a security center under the South Korean cybersecurity company genians has released a report stating that a hacker group associated with North Korea, kimsuky, is integrating AI technology into its attack operations. This includes setting up local LLM environments such as ollama, gpt4all, and msty, testing rag, cursor, and AI development tools, and using generative AI to create phishing files with themes related to virtual assets and financial investments. The report indicates that this group continues to target areas such as virtual assets. Relevant logs also contain queries such as "where can I search for users using BTC," as well as retrieval activities targeting wallet and seed information leaks.