Summary: 2025/04/29 00:39
First reported date: 2017/05/03
Inquiry period : 2025/04/22 00:39 ~ 2025/04/29 00:39 (7 days), 4 search results
전 기간대비 -50% 낮은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 Malware Campaign 위장 입니다.
기관 및 기업 북한 도 새롭게 확인됩니다.
기타 제안 서로 Deep Dive Into 등 신규 키워드도 확인됩니다.
Konni is a remote administration tool, observed in the wild since early 2014. The Konni malware family is potentially linked to APT37, a North-Korean cyber espionage group active since 2012. The group primary victims are South-Korean political organizations, as well as Japan, Vietnam, Russia, Nepal, China, India, Romania, Kuwait, and other parts of the Middle East. Ref.
* 최근 뉴스기사 Top3:
ㆍ 2025/04/24 제안서로 위장을 하고 있는 북한 코니(Konni) 에서 만든 악성코드-제안서(2025.4.11)
참고로 동일한 그룹의 악성코드 타입은 Remcos njRAT QuasarRAT 등 112개 종이 확인됩니다.
Trend graph by period
Related keyword cloud
Top 100| # | Trend | Count | Comparison |
|---|---|---|---|
| 1 | Konni | 4 | ▼ -2 (-50%) |
| 2 | Malware | 3 | ▲ 1 (33%) |
| 3 | North Korea | 3 | ▼ -3 (-100%) |
| 4 | cti | 2 | ▼ -2 (-100%) |
| 5 | lnk | 2 | ▼ -1 (-50%) |
| 6 | dprk | 2 | ▼ -3 (-150%) |
| 7 | Campaign | 2 | ▲ 1 (50%) |
| 8 | 제안 | 2 | ▲ new |
| 9 | 서로 | 2 | ▲ new |
| 10 | 위장 | 2 | ▲ 1 (50%) |
| 11 | Deep | 1 | ▲ new |
| 12 | Dive | 1 | ▲ new |
| 13 | Into | 1 | ▲ new |
| 14 | MultiStage | 1 | ▲ new |
| 15 | 북한 | 1 | ▲ new |
| 16 | 있는 | 1 | ▲ new |
| 17 | APT | 1 | - 0 (0%) |
Special keyword group
Top 5
Malware Type
This is the type of malware that is becoming an issue.
| Keyword | Average | Label |
|---|---|---|
| Konni |
|
4 (100%) |
Attacker & Actors
The status of the attacker or attack group being issued.
No data.
Country & Company
This is a country or company that is an issue.
| Keyword | Average | Label |
|---|---|---|
| North Korea |
|
3 (50%) |
| dprk |
|
2 (33.3%) |
| 북한 |
|
1 (16.7%) |
Malware Family
Top 5
A malware family is a group of applications with similar attack techniques.
In this trend, it is classified into Ransomware, Stealer, RAT or Backdoor, Loader, Botnet, Cryptocurrency Miner.
Threat info
Last 5SNS
(Total : 3)Konni dprk North Korea Malware Campaign APT
News
(Total : 1)| No | Title | Date |
|---|---|---|
| 1 | 제안서로 위장을 하고 있는 북한 코니(Konni) 에서 만든 악성코드-제안서(2025.4.11) - Malware.News | 2025.04.24 |
Additional information
| No | Title | Date |
|---|---|---|
| 1 | Employee monitoring app exposes users, leaks 21+ million screenshots - Malware.News | 2025.04.28 |
| 2 | Introducing XSIAM 3.0 - Malware.News | 2025.04.28 |
| 3 | Deploy Bravely with Prisma AIRS - Malware.News | 2025.04.28 |
| 4 | 2025 Cyber Resilience Research Discovers Speed of AI Advancing Emerging Attack Types - Malware.News | 2025.04.28 |
| 5 | Intel CEO Targets Change in Corporate Culture to Shape Up - Bloomberg Technology | 2025.04.28 |
| View only the last 5 | ||
| No | Title | Date |
|---|---|---|
| 1 | [K-CTI 2025] 엔키화이트햇 천호진 수석, 북한 연계 Konni 그룹의 정교한 공격 활동 분석 내용 공개해 - 데일리시큐 | 2025.04.20 |
| 2 | 북한 해킹 그룹 Konni(코니)에서 만든 사이버범죄 신고시스템 사칭 악성코드-ECRM.hwp.lnk(2025.3.11) - Malware.News | 2025.03.14 |
| 3 | Mounting Konni cyberespionage attacks involve similar techniques - Malware.News | 2024.09.10 |
| 4 | 북한 해킹 단체 Konni(코니) 에서 만든 악성코드-integration.pdf.lnk(2024.8.22) - Malware.News | 2024.08.27 |
| 5 | Threat Tracking: Analysis of puNK-003’s Lilith RAT ported to AutoIt Script - Malware.News | 2024.08.22 |
| View only the last 5 | ||