UN Panel of Experts S/2022/668
Kimsuky attacks on political institutions using ‘KONNI’ RAT; spoofed phishing emails to the Panel
Annex 53.1 (Kimsuky’s Cyberattacks using ‘KONNI’ Malware): “According to multiple reports, Kimsuky hackers have attacked political institutions in several Member States, using the ‘KONNI Remote Administration Tool (RAT)’ malware to harvest credentials and compromise victims. ... Using the harvested credentials, the perpetrators gain access to sensitive information or deploy additional ransomware to generate illicit revenue. ... The Panel itself has also received spoofed phishing emails carrying the ‘KONNI’ tool.”