Genians links newly observed Android remote-wipe activity to the KONNI APT campaign, which the report describes as associated with Kimsuky or APT37 and connected to North Korean state-directed operations. The campaign targeted South Korea-based individuals including a psychological counselor supporting North Korean defector youth, using National Tax Service-themed spear phishing and KakaoTalk messages carrying malware disguised as a stress-relief program. After compromising PCs and accounts, the operators abused stolen Google credentials and Find Hub to track Android devices and repeatedly trigger remote wipes, disrupting victims' ability to receive alerts and respond. The report also describes follow-on propagation through hijacked KakaoTalk PC sessions, turning trusted accounts into delivery channels for secondary malicious files.