Utopia Tech
▸ Engineering & Strategy Journal

Field notes from the edge.

What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.

All postsHealthcareEngineeringStrategySecurityIndustry
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
FeaturedAI
Security· 1 min read

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

North Korea's Kimsuky APT group has evolved beyond using public AI chatbots to deploying private, offline AI infrastructure on dedicated servers. The threat actor is leveraging AI for enhanced document analysis of stolen data and developing capabilities to integrate AI directly into malware creation processes, according to research from South Korean security firm Genians.

UT
Utopia Tech·Aug 10, 2026
Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT MalwareAI
Security

Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware

North Korean state-sponsored threat actor ScarCruft (APT37) is conducting spear-phishing campaigns that impersonate Microsoft Account security alerts to distribute NarwhalRAT malware. The social engineering tactic leverages fake security notifications to create urgency and trick recipients into executing malicious payloads. This campaign demonstrates continued evolution in APT37's tactics targetin

UTUtopia Tech·1 min
North Korean Hackers Are Turning Developer Tools Into Malware Delivery ChannelsAI
Security

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

Cybersecurity researchers at Proofpoint have identified two malicious campaigns linked to the North Korean threat group Contagious Interview, which is targeting developers through fake recruitment and code review schemes. The threat actor is weaponizing developer tools and processes to deliver malware via sophisticated phishing operations. This represents an evolution in North Korean cyber tactics

UTUtopia Tech·1 min
Skip to main content