FBI warns of attacks by North Korean cyber threat group using malicious QR codes

The FBI Jan. 8 released an alert on evolving threat tactics by Kimsuky, a North Korean state-sponsored cyber threat group. As of last year, the group has targeted research organizations, academic institutions, and U.S. and foreign government entities by embedding malicious QR codes in spear-phishing campaigns, referred to as “quishing.” The technique forces victims to use a mobile device to view the QR code, which could be received as an image, email attachment or embedded graphic that evades URL inspection. After scanning the malicious code, victims are routed through attacker-controlled redirectors that collect device and identity information for harvesting and use in additional malicious actions.

https://www.aha.org/news/headline/2026-01-09-fbi-warns-attacks-north-korean-cyber-threat-group-using-malicious-qr-codes

0 comments