North Korean Konni hackers use AI-generated malware against blockchain developers
The North Korean threat group Konni reportedly deployed AI-generated PowerShell malware in phishing attacks targeting blockchain developers in the Asia-Pacific region. The campaign aimed to gain access to sensitive developer environments by delivering backdoors through phishing lures.
What happened
The North Korean threat actor Konni deployed AI-generated PowerShell malware in a phishing campaign targeting blockchain and crypto developers.
The campaign targeted developers and engineering teams in Japan, Australia, and India, expanding beyond the actor's previous focus on South Korea, Russia, Ukraine, and European nations.
Reported impact
The phishing lures delivered an AI-generated PowerShell backdoor enabling access to sensitive developer environments.
Governance controls
Security researchers urged AI-driven defenses, stronger phishing prevention, and stricter cloud access controls.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.