The report tracks Konni malware campaigns that used malicious macro-enabled Word documents with Korean Peninsula and DPRK foreign-affairs themes. One observed lure targeted Russian-language speakers interested in dialogue between the United States and North Korea. Konni is described as a modular remote-administration tool that performs reconnaissance, exfiltrates data, and can receive additional modules. The analysis notes recurring technique overlaps across campaigns and says Konni activity has been potentially linked to APT37, a North Korea-associated espionage group.