Decoy documents used in two recent cyber espionage campaigns apparently aimed at entities linked to North Korea show a connection between the DarkHotel attacks and a piece of malware named KONNI.
Article Link: http://feedproxy.google.com/~r/Securityweek/~3/KxSuzqtghoI/north-korea-campaigns-show-link-between-konni-and-darkhotel