The Konni APT Chronicle: Tracing Their Intelligence-Driven Attack Chain

## Executive Summary This technical analysis details a KONNI APT campaign that delivers an ISO containing a ZIP of obfuscated VBScript and batch scripts which fetch additional payloads from a C2 (anrun.kr), establish persistence via a scheduled task, enumerate system/user files and system info, and exfiltrate collected data over HTTP, with included MITRE ATT&CK mappings and suggested detections/mitigations.