Operation Hunter Adonis was a late-2018 Konni campaign that expanded its lure themes from North Korea-related material to policy documents and cryptocurrency-wallet content. Operators delivered malicious Word documents that prompted victims to enable macros, then used native command-line and certificate utilities to retrieve, decode, and expand additional components selected for 32-bit or 64-bit Windows systems. The campaign’s staged execution and command-and-control communication supported further compromise of targeted hosts.