TO RUSSIA WITH LOVE: ASSESSING A KONNI-BACKDOORED SUSPECTED RUSSIAN CONSULAR SOFTWARE INSTALLER

Summary from the TLDR InfoSec newsletter

A suspected North Korea-linked malware sample, believed to be KONNI, was discovered targeting the Russian Ministry of Foreign Affairs. It was found bundled into a backdoored version of Statistika KZU, a Russian language software installer intended for internal use within the Russian Ministry of Foreign Affairs for relaying annual report files from consular posts.