KONNI HACKERS TARGET BLOCKCHAIN ENGINEERS WITH AI-BUILT MALWARE

Summary from the TLDR InfoSec newsletter

Researchers from CheckPoint have discovered a new malicious campaign from the North Korean Konni hackers. The attack begins with a Discord link that downloads a zip archive containing a lure document and two batch files which downloads a PowerShell backdoor and then deletes other signs of infection. Notably, the malware contains signs of it being AI-generated, such as comments with variable placeholders.