Kimsuky Hackers Attacking Users via Weaponized QR Code to Deliver Malicious Mobile App

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Kimsuky Hackers Use Weaponized QR Codes for Mobile Malware Distribution The North Korean state-linked group Kimsuky has initiated a campaign using weaponized QR codes to distribute malicious mobile applications. This attack targets users through phishing sites that mimic package delivery services, with victims receiving smishing messages containing links to these sites. The malicious campaign was identified by security researchers in September 2025. 3 sources 50