🚨 Threat actor Konni, potentially tied to North Korea, deploys RAT in cyber espionage using Russian Word doc, exploiting WinRAR flaw, obfuscated VB scripts, UAC bypass payload, and using encrypted C2 communication.
Learn more: thehackernews.com/2023/11/ko… (https://thehackernews.com/2023/11/konni-group-using-russian-language.html)
#cybersecurity (https://nitter.moomoo.me/search?q=%23cybersecurity)#hacking (https://nitter.moomoo.me/search?q=%23hacking)
https://nitter.moomoo.me/pic/card_img%2F1727700384448184320%2FJdl0vcIg%3Fformat%3Djpg%26name%3D800x419
https://nitter.moomoo.me/TheHackersNews/status/1727700418501730736#m
The Hacker News / @TheHackersNews (RSS Feed) /
npub194…slld6
2023-11-23 14:47:33
Author Public Key
npub194apv7cvyzelkjatr59fadlt77fzuc6lekd0n86pptmek3grde9quslld6Published at
2023-11-23 14:47:33Event JSON
{
"id": "99f926adebbcfbd49e5489ed273fc4ef080aa576bb5d4b0502b433fac1f9fe86",
"pubkey": "2d7a167b0c20b3fb4bab1d0a9eb7ebf7922e635fcd9af99f410af79b45036e4a",
"created_at": 1700750853,
"kind": 1,
"tags": [
[
"proxy",
"http://nitter.moomoo.me/TheHackersNews/rss#http%3A%2F%2Fnitter.moomoo.me%2FTheHackersNews%2Fstatus%2F1727700418501730736%23m",
"rss"
]
],
"content": "🚨 Threat actor Konni, potentially tied to North Korea, deploys RAT in cyber espionage using Russian Word doc, exploiting WinRAR flaw, obfuscated VB scripts, UAC bypass payload, and using encrypted C2 communication.\n\nLearn more: thehackernews.com/2023/11/ko… (https://thehackernews.com/2023/11/konni-group-using-russian-language.html)\n\n#cybersecurity (https://nitter.moomoo.me/search?q=%23cybersecurity)#hacking (https://nitter.moomoo.me/search?q=%23hacking)\n\nhttps://nitter.moomoo.me/pic/card_img%2F1727700384448184320%2FJdl0vcIg%3Fformat%3Djpg%26name%3D800x419\n\nhttps://nitter.moomoo.me/TheHackersNews/status/1727700418501730736#m",
"sig": "6c2f268c3ae24fc5ff2034941067045c20bd326b2afc26247522b1c04e5d53cdb2cd3d07ed5017582680062b99517f8c2c852577f61cc05c6a6a7c81953342c6"
}