Konni Group

Cyber espionage group from North Korea

North Korean Konni Group Leverages Google’s Find Hub to Wipe Android Devices in Latest Campaigns

Nov 11, 2025

—

by

Lara De Jong

in Threat Actors

North Korea’s Konni Group has escalated its cyber espionage tactics by leveraging Google’s legitimate Find Hub service to remotely wipe Android devices. This sophisticated campaign targets Android and Windows users with data theft and remote control objectives, initiating with spear-phishing emails and deploying the Lilith Remote Access Trojan (RAT).