Genians analyzes a Konni APT campaign impersonating South Korean government bodies, including the National Human Rights Commission and police investigators, to pressure targets with spear-phishing themes. The activity uses spoofed sender identities, conversational lures, and staged trust-building before delivering malicious files, including LNK shortcuts and AutoIT scripts rather than only conventional executables or documents. The report highlights targeting of North Korean human-rights and defector-related communities and recommends behavior-based endpoint detection and managed response to hunt non-executable malware delivery.