According to a report released Monday by South Korean cybersecurity firm Genians, Kimsuky is leveraging local AI systems such as Ollama, GPT4All, and Msty for offline operations, and collecting libraries and frameworks to embed language models into custom software. The group is also using generative AI to create phishing documents themed around digital assets, investment strategies, and fintech services, some of which mimic materials from South Korean AI investment platforms, demonstrating its ongoing readiness to integrate AI technology into its actual attack capabilities.