Konni is a North Korea-linked threat actor that targeted government-related users with MSI installer packages masquerading as legitimate software, including a Russian foreign-ministry-style statistics application. The report explains that the installer drops decoy program components while malicious behavior runs silently in the background, supporting espionage against Russian, Korean, and neighboring government-sector targets.