The North Korean threat actor Konni launched a spear-phishing campaign against Russian diplomats in Indonesia. Konni spoofed the email address of the Russian embassy in Serbia to send a fake celebratory email that downloaded a remote access trojan once opened.