Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures
Konni APT targets Ukraine with malicious LNK lures in 'Conflict Compass' campaign, using JavaScript and PowerShell for initial access.
North Korean APT group Konni has launched a new campaign targeting Ukrainian entities using malicious LNK file lures themed around the ongoing conflict. The operation, dubbed 'Conflict Compass,' uses document-based infection vectors to execute JavaScript and PowerShell payloads for initial access. This campaign is part of North Korea's ongoing integration of cyber operations into its national strategy.
- Konni APT targets Ukraine with malicious LNK file lures.
- Campaign uses geopolitical themes and document-based infection vectors.
- Malware leverages JavaScript and PowerShell for execution.
- Threat actor linked to North Korean state-sponsored operations.
- Operation named 'Conflict Compass' by security researchers.
- ATT&CK
- T1204.002 User Execution: Malicious FileT1059.007 Command and Scripting Interpreter: JavaScript
- Products
- LNK
- Malware
- Konni
- Victims
- Ukraine
- Countries
- North KoreaUkraine
From the original article
Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures Since 2009, the Democratic People’s Republic of Korea (DPRK) has fully integrated cyber operations into its national strategy, leveraging state-ne
By ameer · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.