Remote Access Trojan KONNI Targeting North Korea Technical Analysis and Solution

NSFOCUS (nsfocusglobal.com)

This July a remote access trojan (RAT) KONNI was discovered to be involved in a cyberattack targeting North Korea, which was presumably linked to South Korea. This RAT spreads mainly through phishing emails. Specifically, the attacker first tries to have a powershell script executed via an .scr file, and then downloads the malware of an […] The post Remote Access Trojan KONNI Targeting North Korea Technical Analysis and Solution appeared first on NSFOCUS .