Konni

https://twitter.com/blackorbird

relate to Kimsuky

APT Campaign 'Konni' & 'Kimsuky' find commonality in organizations

https://blog.alyac.co.kr/2347

Operation Moneyholic With HWP Document https://asec.ahnlab.com/1251

Konni's APT Group conducts attacks with Russian-North Korean trade and economic investment documents https://blog.alyac.co.kr/2535

relate to darkhotel

KONNI: A Malware Under The Radar For Years

https://blog.talosintelligence.com/2017/05/konni-malware-under-radar-for-years.html

relate to syscon and darkhotel

https://s.tencent.com/research/report/552.html

relate to syscon

McAfee Uncovers Operation Honeybee, a Malicious Document Campaign Targeting Humanitarian Aid Groups

https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/mcafee-uncovers-operation-honeybee-malicious-document-campaign-targeting-humanitarian-aid-groups/

relate to group123

ScarCruft continues to evolve, introduces Bluetooth harvester

https://securelist.com/scarcruft-continues-to-evolve-introduces-bluetooth-harvester/90729/

relate to Carrotbat

The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia

https://unit42.paloaltonetworks.com/unit42-the-fractured-block-campaign-carrotbat-malware-used-to-deliver-malware-targeting-southeast-asia/

relate to Amadey

Korean Kusa Konni Organization, Blue Sky Utilizing 'Amadey' Russia Botnet

https://blog.alyac.co.kr/2308

relate to babyface rat

The Konni APT Campaign and 'Operation Hunter Adonis'

https://blog.alyac.co.kr/2061

relate to Nokki

New KONNI Malware attacking Eurasia and Southeast Asia

https://unit42.paloaltonetworks.com/unit42-new-konni-malware-attacking-eurasia-southeast-asia/

Nokki relate to group123

NOKKI Almost Ties the Knot with DOGCALL: Reaper Group Uses New Malware to Deploy RAT

https://unit42.paloaltonetworks.com/unit42-nokki-almost-ties-the-knot-with-dogcall-reaper-group-uses-new-malware-to-deploy-rat/