North Korea ramps up cyberspying in Ukraine to assess war risk
The state-sponsored North Korean threat group Konni (Opal Sleet, TA406) was seen conducting intelligence gathering operations against Ukrainian government organizations.
Phishing emails that mimic think tanks are used by the attackers to entice their targets by making references to significant military or political events.
The activity was uncovered in February 2025 by Proofpoint researchers, who said it is probably an attempt to assess the political situation underlying the crisis and promote the DPRK's military engagement with Russia in Ukraine.
In order to better comprehend the will to fight against the Russian invasion and evaluate the conflict's medium-term perspective, Proofpoint evaluates TA406's targeting of Ukrainian government agencies read more about North Korea ramps ...