Konni Hackers Target Ukraine With Malicious LNK Files and VelvetCake PowerShell Malware

Reported 24 Sep 2026 by otx · Severity: medium

North Korea-linked threat actors are conducting Operation Conflict Compass, targeting individuals and organizations focused on Ukraine using spear-phishing emails with malicious ZIP attachments. These contain LNK files disguised as PDFs with themes related to Russia-Ukraine peace