Opal Sleet
threat actorKP01
also known as
Other names and identifiers for this entity.
MISP
Konni · OSMIUM · Opal Sleet · Vedalia
Konni is a threat actor associated with APT37, a North Korean cyber crime group. They have been active since 2012 and are known for their cyber-espionage activities. Konni has targeted various sectors, including education, government, business organizations, and the cryptocurrency industry. They have exploited vulnerabilities such as CVE-2023-38831 and have used malware like KonniRAT to gain control of victim hosts and steal important information.
02
related actors
Related entries.
- Kimsuky· likely
03
references
External citations — patches, advisories, analysis.
- https://nsfocusglobal.com/the-new-apt-group-darkcasino-and-the-global-surge-in-winrar-0-day-exploits/
- https://paper.seebug.org/3031/
- https://www.rewterz.com/rewterz-news/rewterz-threat-alert-konni-apt-group-active-iocs-11
- https://www.securonix.com/blog/stiffbizon-detection-new-attack-campaign-observed/
- https://gbhackers.com/vedalia-apt-group-exploits/