Powershell
1 incident, 0 live. 273 days since the last new one.
1 drains in the last 12 months
1 drains in the last 12 months
1 drains in the last 12 months
1 drains in 2026
1 drains in 2026
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½
Less More
Past
January 2026 1
-
North Korea-linked KONNI targets blockchain developers with an AI-generated PowerShell backdoor
Check Point Research reported on 22 January 2026 that the North Korea-linked group KONNI, long focused on South Korean government targets, is now going after developers and engineering teams on blockchain and crypto projects. Phishing lures dressed up as project documentation deliver a PowerShell backdoor that Check Point calls AI-generated, with activity seen in Japan, Australia and India. A compromised developer can expose source code, infrastructure and blockchain credentials. No losses were reported.
Blockchain and crypto developers and engineering teams (Asia-Pacific)·Multiple EVM chains·Since Jan 22, 2026·
No drains match these filters.