An Analysis of KONNI APT's Attack Activity Disguised as a Korean Android Chat Application
released on 2019-12-24 @ 03:29:32 PM
In August 2019, South Korean security vendor ESTsecurity disclosed a new attack activity of the Konni APT organization using the Android Trojan, and stated that it was associated with the APT organization Kimsuky. In the recent past, the Red Rain Drops team of the Chianxin Threat Intelligence Center discovered a number of malicious code attacks that were targeted at Android users in South Korea during routine advanced threat monitoring.