North Korean KONNI APT Group Targets Blockchain Developers with AI-Generated Malware

The North Korean KONNI APT group has launched a campaign deploying AI-generated PowerShell backdoor malware aimed at blockchain and cryptocurrency developers in Japan, Australia, and India. According to NS3.AI, the group utilizes Discord to host malicious archives, which aids in the infection process. Check Point Research provided an in-depth analysis of these activities in a report released on January 21, 2026.