CSIS entry 396 · January 2022
A DRPK-affiliated group targeted multiple Russian diplomats with malware. The diplomats received an email disguised as a New Year greetings screensaver but which, after being opened, installed a remote access trojan.
North Korean hackers target Russian diplomats using New Year greetings · 2021-12
North Korean hackers target Russian diplomats using New Year greetings
https://therecord.media/north-korean-hackers-attack-russian-diplomats-using-new-year-greetings/
https://blog.lumen.com/new-konni-campaign-targeting-russian-ministry-of-foreign-affairs/
Targeting of Russian diplomats in Asia · Jan 2022
The North Korean threat actor Konni launched a spear-phishing campaign against Russian diplomats in Indonesia. Konni spoofed the email address of the Russian embassy in Serbia to send a fake celebratory email that downloaded a remote access trojan once opened.
10th January– Threat Intelligence Report · 2022-01-10
A series of attacks targeting Russia’s Ministry of Foreign Affairs has been attributed to North Korean APT group Konni. Threat actors gained access by leveraging a socially engineered phishing campaign with New Year greetings and stealing credentials, aiming at collecting intelligence.
Russian diplomatic sector · 03/01/2022
Researchers from Cluster25 reveal that APT37 have compromised the email account of a staff member of Russia’s Ministry of Foreign Affairs (MID) and deployed spear-phishing attacks against the country’s diplomats in other regions via the Konni malware. [Date Occurred: Since at least 19/10/2021; Date Discovered: -]
Konni targeting the Russian diplomatic sector with New Year’s greetings spearphishing lure · January 2022 (report date)
Para 159: “In January 2022, another cybersecurity firm released a report that a cyberactor of the Democratic People’s Republic of Korea called “Konni” targeted the Russian diplomatic sector using New Year’s greetings as a spearphishing lure.” (footnote 117: https://cluster25.io/2022/01/03/konni-targets-the-russian-diplomatic-sector)
country: Russian diplomats in Indonesia
The North Korean threat actor Konni launched a spear-phishing campaign against Russian diplomats in Indonesia.