North Korea–linked APT Kimsuky behind quishing attacks, FBI warns

North Korea–linked APT Kimsuky is conducting targeted quishing campaigns that embed malicious QR codes in spear-phishing emails to harvest credentials and bypass MFA, primarily against think tanks, academic institutions, and government entities; the report also describes related intrusions where actors exploited RDP and Office Equation Editor vulnerabilities and deployed remote access tools and keyloggers.