North Korea’s Kimsuky cyber group is using generative artificial intelligence to create phishing documents aimed at cryptocurrency and financial-sector targets, according to reporting by The Block. The documents use themes tied to digital assets, investment strategies and fintech services.
Phishing campaigns commonly rely on messages or files designed to appear credible enough to prompt recipients to open attachments, follow instructions or disclose sensitive information. Generative AI can help attackers produce more polished and tailored material, potentially making deceptive documents harder to identify at a glance.
The use of crypto- and finance-related themes reflects the sector’s exposure to cyber risks, including social engineering campaigns that target employees, investors and service providers. Organizations and individuals handling digital-asset activity typically treat unexpected documents, investment materials and fintech-related communications with caution, particularly when they request credentials or software downloads.
