Skip to content
North Korea-linked Hackers Use Naver and Google Ads for Malware Distribution

North Korea-linked Hackers Use Naver and Google Ads for Malware Distribution

First seen 19 Jan 2026, 10:01 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A North Korea-linked hacking group, known as 'Konni', has been conducting a sophisticated malware distribution campaign by exploiting Naver and Google ad systems. This operation, referred to as the 'Poseidon Operation', targets users through malicious advertisements, potentially affecting a wide range of individuals and organizations. The campaign highlights the ongoing threat posed by state-sponsored cybercriminals.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 212d ago How this analysis works

More articles in this cluster (4)

Following this threat?

Track Konni and Google in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed