Konni malware

Updated on 2022-11-22

Chinese security firm Anheng Hunting Labs has published a report on recent operations of the Konni North Korean APT, attacks that targeted entities in Eastern Europe and Northeast Asia throughout 2022. Read more: 全面复盘：2022年Konni组织针对东欧和东北亚地区的攻击活动分析

Updated on 2022-10-24

South Korean security firm ESTsecurity analyzed a malicious Android app they linked to Konni, a North Korean APT. Read more: Trojan.Android.AgentNK 

Overview: Konni targets Russia

Limen’s Black Lotus Labs have published a report on a recent spear-phishing campaign targeting Russian targets that they linked to Konni, a North Korea-based espionage group. The group previously targeted Russian government agencies earlier this year.

We found another #Konni lure written in Russian that was active in the wild last week

— Black Lotus Labs (@BlackLotusLabs) July 5, 2022