DPRK Cyber IndexYearsActorsSourcesAttacks on North KoreaMethodologyContributeSearch

Organizations in Russia

Date (as written)
20/11/2023
Year
2023
Country
RU
Actors (as written)
Konni
Actor pages
Konni
Tags (as written)
Attack: Targeted Attack; Target Class: Multiple Industries; Attack Class: Cyber Espionage; Tags: Fortinet, North Korea, Konni APT

Source entries (2)

Hackmageddon cyber attacks timelines (Paolo Passeri)

Organizations in Russia · 20/11/2023
Researchers from Fortinet observe the North Korea-linked Konni APT group using a weaponized Russian-language Word document in an ongoing phishing campaign. [Date Occurred: Since at least September 2023; Date Discovered: 'Recently']
https://www.hackmageddon.com/2024/01/29/16-30-november-2023-cyber-attacks-timeline/
https://securityaffairs.com/154695/apt/konni-apt-russian-language-bait-doc.html

Fortinet FortiGuard Labs blog

Konni Campaign Distributed Via Malicious Document | FortiGuard Labs · 2023-11-20T16:00:00.000Z
FortiGuard Labs exposes the KONNI campaign's distribution of using a counterfeit Russian military operation document. Read more on the details of the attack chain.…
https://www.fortinet.com/blog/threat-research/konni-campaign-distributed-via-malicious-document

Suggest a correction on GitHub