2021-09-30
PaloaltoNetworks
Crooked Pisces
#CrookedPisces
CrookedPisces
"Crooked Pisces AKA KONNI, is a threat group operating in East Asia. This group is known for using spear-phishing attacks with documents related to North Korea, but lately, documents related to cryptocurrency also have been observed. Crooked Pisces is also the name of their custom RAT which leverages anti-analysis techniques and intelligence gathering features."
- PaloaltoNetworks, https://unit42.paloaltonetworks.com/atoms/crooked-pisces/
Also known as
| Name | Named by | AKA | First seen | Last seen |
|---|---|---|---|---|
| CrookedPisces | PaloaltoNetworks | Konni | 2021-09-30 | 2021-09-30 |
| Hermit | Tencent | Konni | 2020-04-24 | 2020-04-24 |
| Konni | CiscoTalos | - | 2017-05-03 | 2024-11-10 |
| NickelJuniper | SecureWorks | Konni | - | 2024-10-08 |
| Osmium | Microsoft | Konni | 2021-10-07 | 2022-11-07 |
| SectorA07 | NSHC | Konni | 2020-03-12 | 2024-11-20 |
| TA406 | Proofpoint | Konni | 2021-11-19 | 2021-11-19 |
| Vedalia | Symantec | Konni | 2024-04-07 | 2024-10-04 |
| puNK-001 | S2W | Konni | 2024-08-22 | - |
| puNK-003 | S2W | Konni | 2024-08-22 | 2024-08-22 |