North Korean hacking group Kimsuky is expanding its use of artificial intelligence beyond phishing attempts. They have begun developing a local Large Language Model (LLM) to automate aspects of their cyberattacks. This LLM is being utilized not only for creating deceptive phishing lures, but also for extracting information and automating attack processes. Experts believe this development signals a significant escalation in the sophistication and efficiency of Kimsuky’s operations. The group's ability to build and deploy its own LLM suggests increased self-reliance and a willingness to invest in advanced technology. This advancement raises concerns about the potential for more frequent and damaging cyberattacks originating from North Korea. The development points to a broader trend of nation-state actors leveraging AI to enhance their cyber capabilities.