DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Konni (9)

Events whose actors field, as written by the source, names this.

Date (as written)IncidentCountryActors
since at least 2012Konni espionage against Russian government officials and Russian foreign policy targetsRussian FederationKonni (also known as TA406)
January 2022CSIS entry 396
20/11/2023Organizations in RussiaRUKonni
2023-04-11APT-C-28(ScarCruft)组织对韩国地区攻击活动分析APT-C-28; ScarCruft; Konni
21/02/2024Russian Consular Department of the Ministry of Foreign Affairs (MID)RUKonni (a.k.a. Opal Sleet, Osmium, or TA406)
09/09/2024Several unnamed South Korean enterprises, including a tax law firm.RUKonni (linked to the North Korean state-sponsored group Kimsuky)
2024-05-24瑞星EDR还原APT37组织对中韩食品行业攻击过程-AI云资讯APT37; Konni; Reaper
Q3 2024 (from title: APT QUARTERLY HIGHLIGHTS - Q3 2024)Konni threat campaign against Korean and Russian government entitiesSouth Korea; RussiaKonni (linked to Kimsuky)
(no date on page)From North Korean Phishing to Underground Online Hosting Services (Konni campaigns)Bulgaria (hosting IP range)APT37 (suspected); Konni