Chosun

North Korea's Konni APT Targets Android and Windows Users in September 2025

First seen 3 Dec 2025, 06:37 UTC • Securityaffairs.Co

•35.4

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

In September 2025, the North Korea-linked APT group Konni, also known as Kimsuky, targeted users by posing as counselors to steal data and wipe Android phones using Google Find Hub. The attacks also affected Windows systems, highlighting the group's ongoing cyber espionage activities.

How this analysis works

Attack Flow

Continue Reading

Google Addresses Eighth Chrome Zero-Day Vulnerability in 2025 Critical Exploitation of Cisco CM and Samsung KNOX Vulnerabilities Google Fixes 107 Security Flaws in Android Update Google Chrome Zero-Day Vulnerability CVE-2025-13223 Exploited in the Wild Sandworm Launches Wiper Malware Campaign Against Ukrainian Organizations Apple Alerts Users of Targeted Mercenary Spyware Attacks in 110 Countries

North Korea's Konni APT Targets Android and Windows Users in September 2025

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading