FBI Flags Quishing Attacks From North Korean APT
ID: 092ca887-b12b-527a-9c90-bbaf66458e91
STIX ID: report--092ca887-b12b-527a-9c90-bbaf66458e91
Feed Name: Dark Reading
Threat Score
A FBI alert details Kimsuky (a North Korean APT) using 'quishing'—malicious QR codes embedded in spear-phishing emails—to route targets (US/foreign government entities, think tanks, academic institutions) to mobile-optimized credential-harvesting pages; attackers can steal session tokens to bypass MFA and hijack cloud identities. Incidents from May–June 2025 are described, and researchers also observed criminal kits using split QR techniques to evade email security.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.