North Korean spies are running local LLMs to cause AI mischief

North Korea's Kimsuky hacking group is now using locally run AI tools to sharpen its cyberattacks, moving beyond experimentation toward full integration. The group uses AI to craft convincing phishing lures and analyze stolen data, making traditional content-based threat detection unreliable. Defenders must shift to behavior-based detection methods instead.