Russian Government Software Backdoored to Deploy Konni RAT Malware

DCSO identified a trojanized MSI installer for a Russian Ministry of Foreign Affairs consular tool ('Statistika KZU') that delivers Konni RAT (aka UpDog). The implant provides remote access, file transfer, and command execution; packaging within legitimate installers is a recurring TTP linked to DPRK-associated Konni/TA406 activity targeting Russian entities, indicating active, targeted espionage against consular systems.