Opal Sleet
Opal Sleet is classified as state-sponsored.
- Origin
- North Korea
- Also known as
- 3
Konni is a threat actor associated with APT37, a North Korean cyber crime group. They have been active since 2012 and are known for their cyber-espionage activities. Konni has targeted various sectors, including education, government, business organizations, and the cryptocurrency industry. They have exploited vulnerabilities such as CVE-2023-38831 and have used malware like KonniRAT to gain control of victim hosts and steal important information.
The group's reported origin is North Korea.
Also known as: OSMIUM, Konni, Vedalia
Published reports on this actor:
- https://nsfocusglobal.com/the-new-apt-group-darkcasino-and-the-global-surge-in-winrar-0-day-exploits/
- https://paper.seebug.org/3031/
- https://www.rewterz.com/rewterz-news/rewterz-threat-alert-konni-apt-group-active-iocs-11
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.