Skip to content
Pyongyang-Sponsored Hacking Group Uses KakaoTalk in Malware Distribution Campaign: Report

Pyongyang-Sponsored Hacking Group Uses KakaoTalk in Malware Distribution Campaign: Report

Ground.News March 16, 2026

A North Korea-linked hacking group has used stolen KakaoTalk accounts to spread malware in a series of recent cyberattacks, highlighting a new distribution tactic, a report showed Monday. Konni, the hacking group tied to Kimsuky and other Pyongyang- groups, was found to have recently carried out an advanced persistent threat (APT) campaign using spear-phishing emails and compromised KakaoTalk accounts to infect victims' systems, accordi…

North Korea-linked hackers carried out a spear-phishing campaign that used the South Korean messaging platform KakaoTalk to spread malware, according to a report Monday.

It has been revealed that ‘Konni,’ a hacking group known to be linked to North Korea, is conducting multi-stage attacks using spear phishing emails and KakaoTalk. Spear phishing is a method in which malicious code is planted and infected on a user's PC by disguising itself as a legitimate email, and then distributed to the user's friends.

It has been revealed that the Konni group, known as a North Korean hacking organization, is carrying out cyber attacks to spread malware using KakaoTalk, a messenger platform widely used in South Korea.

A North Korea-linked hacking group has used stolen KakaoTalk accounts to spread malware in a series of recent cyberattacks, highlighting a new distribution tactic, a report showed Monday.

Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%: Coupon Code MWNEWS10 Note: Affiliate link – your enrollment helps support this platform at no extra cost to you. ◈ Key Findings Initial access was achieved through a spear-phishing email disguised as a notice appointing the recipient as a North Korean human rights lecturer. Afte…

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

Extracted Entities

APT Groups (2)

Attack Types (2)

MITRE ATT&CK (1)

Tools (1)