ThaiCERT Threat Group Cards
Meeting the “Ministrer” · 2022-09
Meeting the “Ministrer” https://www.fortinet.com/blog/threat-research/konni-rat-phishing-email-deploying-malware
Meeting the “Ministrer”
- Date (as written)
- 2022-09
- Year
- 2022
- Actors (as written)
- Reaper, APT 37, Ricochet Chollima, ScarCruft
- Actor pages
- ReaperAPT 37Ricochet ChollimaScarCruft
Source entries (3)
Hackmageddon cyber attacks timelines (Paolo Passeri)
Government Organization in Russia · 19/09/2022
Researchers from Fortinet discover a campaign allegedly carried out by APT37, distributing the Konni Remote Access Trojan. [Date Occurred: During August 2022; Date Discovered: During August 2022]
Fortinet FortiGuard Labs blog
Meeting the “Ministrer” | Fortinet Blog · 2022-09-19T20:47:00.000Z
FortiGuard Labs discovered an unassuming phishing email that attempts to deploy malware. The actions used to execute this strategy are consistent with Konni, a RAT that has been tied to the group A…
Values found later for empty fields
country: Russian
It aims to appear official by spoofing an address for the Consulate General of Russia in Shenyang, China. It is targeted at another Russian government address.