北韩黑客组织金速基构建本地 LLM 环境，AI 攻击能力全面升级

北韩黑客组织金速基构建本地 LLM 环境，AI 攻击能力全面升级

2026-08-10 08:27

ChainThink 消息，8 月 10 日，据韩联社报道，网络安全企业 Genians 披露，北韩侦察总局下属黑客组织金速基（Kimsuky）已构建独立运行的本地大型语言模型（LLM）环境及检索增强生成（RAG）体系。

该组织使用 Ollama、GPT4All、Msty 等本地 LLM 管理工具及 AI 代码编辑器 Cursor，意图推动情报提取与攻击流程自动化。

攻击手法方面，金速基已转向利用生成式 AI 制作高度仿真的虚拟资产与金融领域文档，用于精准鱼叉式钓鱼攻击，目标包括加密货币钱包信息、Gmail 账户及网站注册记录等敏感数据。

Genians 安全中心负责人文钟铉表示，随着 AI 技术发展，社会工程攻击将持续精细化，建议企业部署以行为检测为核心的 EDR 威胁猎捕体系加以应对。

Disclaimer: Contains third-party opinions, does not constitute financial advice

Recommended Reading

NVIDIA attracts $85 billion in investor demand during massive bond issuance

06-16
NVIDIA attracts $85 billion in investor demand during massive bond issuance

Ethereum surges over 10% in 24 hours, currently priced at $1,841.31

06-16
Ethereum surges over 10% in 24 hours, currently priced at $1,841.31

Amazon announces a multi-billion dollar investment in Missouri to build a data center campus, expected to create over 400 long-term positions

06-16
Amazon announces a multi-billion dollar investment in Missouri to build a data center campus, expected to create over 400 long-term positions

Binance Platform's SpaceX Perpetual Contract Trading Volume Surpasses $9 Billion, Capturing Over 60% Market Share

06-16
Binance Platform's SpaceX Perpetual Contract Trading Volume Surpasses $9 Billion, Capturing Over 60% Market Share

Binance platform XLM/USDT short-term spike down to $0.17, now recovered to $0.225

06-16
Binance platform XLM/USDT short-term spike down to $0.17, now recovered to $0.225

Trump: The Strait of Hormuz has been fully reopened as of Friday, and all agreements have been signed

06-16
Trump: The Strait of Hormuz has been fully reopened as of Friday, and all agreements have been signed

SlowMist: Aztec Connect Contract Hacked for $2.19 Million Due to ZK-Rollup L1/L2 State Boundary Vulnerability

06-15
SlowMist: Aztec Connect Contract Hacked for $2.19 Million Due to ZK-Rollup L1/L2 State Boundary Vulnerability