North Korean Konni targets blockchain developers with AI
Check Point Research revealed that the North Korean advanced persistent threat (APT) group, KONNI, has been targeting blockchain developers in Japan, Australia, and India. The hackers are using AI-generated PowerShell backdoors. According to reports released on January 21, 2026, the attack starts when KONNI uses Discord to offer a link that prompts developers to download a ZIP file. This archive contains elements that start a multi-stage infection process on the