FBI Warns North Korean Hackers Using Malicious QR Codes in Spear-Phishing
North Korean-affiliated Kimsuky uses malicious QR codes (quishing) in targeted spear-phishing to move victims to less-secure mobile devices and bypass defenses.
Phishing kits and phishing-as-a-service expanded in 2025, enabling less skilled attackers and leveraging AI-generated messages and QR-based quishing to increase realism and bypass defenses.
