Cisco has uncovered a remote administration tool called Konni that it says has been used in attacks against government agencies and public organizations linked to North Korea. Two recent espionage campaigns against political and strategic targets in North Korea has been linked to malware that has stayed hidden for the better part of three years. Current iterations of the malware include components that allow for data theft, keylogging, screenshot capture and the execution of arbitrary code. The attackers used the Konni malware sparingly, and the most recent attacks were carried out a few days ago.
Source: https://threatpost.com/stealthy-rat-targeting-north-korea-since-2014/125450/