Opal Sleet

Konni is a threat actor associated with APT37, a North Korean cyber crime group. They have been active since 2012 and are known for their cyber-espionage activities. Konni has targeted various sectors, including education, government, business organizations, and the cryptocurrency industry. They have exploited vulnerabilities such as CVE-2023-38831 and have used malware like KonniRAT to gain control of victim hosts and steal important information.

Qrupun mənşəyi Şimali Koreya kimi bildirilir.

Digər adları: OSMIUM, Konni, Vedalia

Bu aktor haqqında dərc edilmiş hesabatlar:

• https://nsfocusglobal.com/the-new-apt-group-darkcasino-and-the-global-surge-in-winrar-0-day-exploits/
• https://paper.seebug.org/3031/
• https://www.rewterz.com/rewterz-news/rewterz-threat-alert-konni-apt-group-active-iocs-11

Mənbə: MISP Galaxy, Malpedia.