The Kimsuky group's Konni campaign is intensifying, using cloud services and FTP for stealthy attacks. Targeting South Korea, Russian government institutions. they use spear-phishing, fake documents, and free domains for remote control and malware deployment. EDR systems.