Zimperium’s Coverage Against Android Malware in Donot APT Operations and Extended Indicators of Compromise

Kimsuky is reported to have expanded its operations to target mobile users via weaponized QR codes, indicating an APT-led campaign that leverages QR codes as a delivery or social-engineering vector; the headline signals evolution in attacker TTPs but the document provides no technical details, indicators, or scope of impact.