Rewterz summarizes active indicators tied to the North Korea-linked Konni APT, a cyber-espionage group active since at least 2014. The source describes Konni RAT delivery through phishing messages or emails, with weaponized files leading to implants that collect victim information, capture screenshots, steal files, and provide a remote interactive shell. It cites targeting of government and political organizations in South Korea, the United States, Russia, East Asia, Europe, and the Middle East, including a January 2022 Russian diplomatic-sector lure themed around New Year's Eve. The advisory provides domains and hashes for blocking and hunting related Konni activity.