Opal Sleet
No sourced public emblem in this profile.
reference profile · reported nexus: KP (not nationality)
Konni is a threat actor associated with APT37, a North Korean cyber crime group. They have been active since 2012 and are known for their cyber-espionage activities. Konni has targeted various sectors, including education, government, business organizations, and the cryptocurrency industry. They have exploited vulnerabilities such as CVE-2023-38831 and have used malware like KonniRAT to gain control of victim hosts and steal important information.
Source-reported aliases: OSMIUM, Konni, Vedalia. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): No country-level metadata
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://paper.seebug.org/3031/
https://www.rewterz.com/rewterz-news/rewterz-threat-alert-konni-apt-group-active-iocs-11
https://www.securonix.com/blog/stiffbizon-detection-new-attack-campaign-observed/
https://gbhackers.com/vedalia-apt-group-exploits/