[IMPORTANT] North Korea’s KONNI Group Deploys AI-Powered Malware Targeting Blockchain Developers

The North Korean KONNI advanced persistent threat (APT) group has initiated a cyberattack campaign using AI-generated PowerShell backdoor malware. The targets are blockchain and cryptocurrency developers located in Japan, Australia, and India. This malware is distributed through Discord-hosted malicious archives, as detailed by a January 21, 2026 report from Check Point Research.