Skip to content
KONNI Cyber Group Targets Blockchain Developers with New Phishing Campaign

KONNI Cyber Group Targets Blockchain Developers with New Phishing Campaign

First seen 3 Feb 2026, 20:27 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Check Point Research has identified a phishing campaign linked to the KONNI cyber espionage group, which is affiliated with North Korea. The group, known for its long-standing focus on South Korean entities, is now shifting its attention to software developers, particularly those involved in blockchain and cryptocurrency projects. This marks a significant change in KONNI's targeting strategy and technical approach.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 211d ago How this analysis works

More articles in this cluster (1)