aiqbench analysis
This report details a significant tactical shift where the Kimsuky threat group leverages an OpenCode AI agent to automate the mass production of sophisticated phishing decoys and malware-laden LNK shortcuts. The integration of generative AI into this cyber espionage campaign highlights how adversaries are using machine learning to scale social engineering attacks while maintaining high levels of realism in their lures. For the security community, this underscores the evolving threat landscape where AI tools are directly enabling faster, more voluminous, and harder-to-detect intrusion attempts targeting corporate financial data.
Kimsuky Hackers Use OpenCode AI Agent to Mass-Produce Phishing Decoys in LNK Attacks

Kimsuky has been observed using an AI agent to produce convincing phishing decoys at scale, then hiding malware inside Windows shortcut files. The latest activity shows how ordinary-looking documents can become the first step in compromise. The campaign begins with spear-phishing messages carrying ZIP archives. Inside is a malicious LNK shortcut disguised as a document, […] The post Kimsuky Hackers Use OpenCode AI Agent to Mass-Produce Phishing Decoys in LNK Attacks appeared first on Cyber Security News.
Kimsuky has been observed using an AI agent to produce convincing phishing decoys at scale, then hiding malware inside Windows shortcut files. The latest activity shows how ordinary-looking documents can become the first step in compromise. The campaign begins with spear-phishing messages carrying ZIP archives. Inside is a malicious LNK shortcut disguised as a document, often with a browser-style icon and false details. When opened, it displays a decoy while silently launching…
Excerpt shown under the publisher's RSS terms · 72 words · full text and figures are on the publisher's site
Related coverage

Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026)
Cybersecurity News · Jul 28, 2026

Hackers Use Claude and GPT-Powered Tools to Help Breach Government and Financial Networks
Cybersecurity News · Sep 10, 2026
Problems of Proliferation
LessWrong · Sep 29, 2026
Links #5: 2026/07
LessWrong · Jul 31, 2026