# Konni 
https://twitter.com/blackorbird

## relate to Kimsuky

APT Campaign 'Konni' & 'Kimsuky' find commonality in organizations

https://blog.alyac.co.kr/2347

Operation Moneyholic With HWP Document 
https://asec.ahnlab.com/1251

Konni's APT Group conducts attacks with Russian-North Korean trade and economic investment documents
https://blog.alyac.co.kr/2535

## relate to darkhotel

KONNI: A Malware Under The Radar For Years

https://blog.talosintelligence.com/2017/05/konni-malware-under-radar-for-years.html

## relate to syscon and darkhotel

https://s.tencent.com/research/report/552.html

## relate to syscon

McAfee Uncovers Operation Honeybee, a Malicious Document Campaign Targeting Humanitarian Aid Groups

https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/mcafee-uncovers-operation-honeybee-malicious-document-campaign-targeting-humanitarian-aid-groups/

## relate to group123

ScarCruft continues to evolve, introduces Bluetooth harvester

https://securelist.com/scarcruft-continues-to-evolve-introduces-bluetooth-harvester/90729/

## relate to Carrotbat

The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia

https://unit42.paloaltonetworks.com/unit42-the-fractured-block-campaign-carrotbat-malware-used-to-deliver-malware-targeting-southeast-asia/

## relate to Amadey
Korean Kusa Konni Organization, Blue Sky Utilizing 'Amadey' Russia Botnet 

https://blog.alyac.co.kr/2308

## relate to babyface rat

The Konni APT Campaign and 'Operation Hunter Adonis' 

https://blog.alyac.co.kr/2061


## relate to Nokki

New KONNI Malware attacking Eurasia and Southeast Asia

https://unit42.paloaltonetworks.com/unit42-new-konni-malware-attacking-eurasia-southeast-asia/


## Nokki relate to group123

NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT

https://unit42.paloaltonetworks.com/unit42-nokki-almost-ties-the-knot-with-dogcall-reaper-group-uses-new-malware-to-deploy-rat/