UN Panel of Experts S/2024/215
konni-campaign-distributed-via-malicious-document · November
Annex 59: List of DPRK Cyberthreat actors’ malicious activities monitored by the Panel in 2023 (row 56 of 75, PDF p. 329). DPRK cyber actor: ScarCruft; Report Name: konni-campaign-distributed-via-malicious-document; Case Summary: ScarCruft deployed a Russian-language Word document equipped with a malicious macro, which when opened initiated VBA script that displays an article in Russian on the war in Ukraine. This campaign aims to extract information and execute commands on compromised devices.; Publication Month: November