통일 및 북한인권 분야 표적 Konni APT 캠페인

# Executive Summary This GSC report analyzes active Konni APT spear-phishing campaigns that impersonate government and civic organizations in Korea, delivering LNK shortcut files inside ZIP attachments which unpack and execute obfuscated VBS/BAT/PowerShell chains (update_cmd.zip) to establish persistence, download payloads, and exfiltrate system and user data to C2 servers (e.g., anrun.kr); the report includes static code analysis, IoCs (file hashes, domains, IPs), MITRE ATT&CK mapping, similarity comparisons to prior Konni activity, and recommended EDR-based detection and coordinated remediation.