Phishing

Phishing is a social engineering attack where threat actors impersonate trusted entities through email or messaging to trick users into revealing sensitive information or clicking malicious links. For AI governance, phishing poses a critical risk because successful attacks can compromise access to AI systems, training data, and model parameters, potentially leading to data breaches or unauthorized model modifications. Organizations must integrate phishing awareness training and email security controls into their AI governance frameworks to protect both human operators and the integrity of AI systems themselves.

1 item

ResearchGlobal2026-08-10

Kimsuky's Local LLM Operation Breaks the Content-Detection Control Model

South Korean security firm Genians has documented North Korea's Kimsuky threat group running structured local LLM environments to support phishing campaigns, malware development, and analysis of stolen documents. The group is using tools including Ollama, GPT4All, and Msty in what researchers describe as deliberate preparation rather than casual experimentation. For enterprise security and compliance teams, the finding signals that content-based threat detection controls calibrated against pre-AI attack materials are now materially insufficient.

Kimsuky nation-state AI adversarial AI use phishing threat intelligence AI security risk red teaming North Korea