Kimsuky Builds an Offline LLM Lab on Its Own Attack Servers to Triage Stolen Data

Diplomatic missions and military, security, virtual-asset, policy, and academic organizations, primarily in South Korea, under the campaign Genians tracks as Operation GitPower

Genians Security Center found that the North Korean group Kimsuky had installed and run local large language model environments on infrastructure it controlled, using Ollama, GPT4All, and Msty, experimenting with Cursor, and standing up retrieval-augmented generation over locally held documents. Investigators confirmed execution rather than mere download by locating the SSH authentication key files Ollama generates only on first launch. Genians assesses this as the first documented case of a state-sponsored group building a self-hosted LLM environment for operational use, which lets the operators analyze stolen mail, internal documents, and credential dumps without sending any of it to a commercial provider, sidestepping content filters and abuse monitoring at once. One recovered operator prompt, written in Korean, asks an analysis tool to check whether wallet seed phrases, sign-up passwords, Gmail credentials, and site registration histories appeared in stolen data. The wider campaign inherits the earlier FlowerPower attack flow, uses Git repositories as command and control and as the distribution channel for encrypted AsyncRAT payloads, and has leaned on generative AI to produce decoy documents since the start of 2026

Not a vulnerability. The finding is that guardrails and provider-side abuse detection are a control an adversary can simply opt out of by running open-weight models on its own hardware, and that the resulting capability is aimed at triaging what has already been stolen