The North Korean hacking group Kimsuky is using QR code phishing to target Americans with fake questionnaires and malicious ...

Overlooked attack method used since last August in a rash of account takeovers. Well, this sucks. But the target list makes sense, from the perspective of an enemy attacking. Ed: trying to be sure the ...

Kimsuky's latest attacks can bypass email protections and MFA to steal M365 and VPN accounts.

Microsoft 365 is under attack, China and Russia afflited hackers suspected. Updated December 23 with advice from a mobile security solutions expert regarding the Russian device code attacks targeting ...

ConsentFix is an OAuth phishing technique abusing browser-based authorization flows to hijack Microsoft accounts. Push ...

According to Kaspersky data, detections of malicious QR codes jumped from 46,969 in August 2025 to 249,723 in November 2025—a more than fivefold increase in just three months.

The Federal Bureau of Investigation (FBI) has released a "FLASH" to alert NGOs, think tanks, academia, and other foreign ...

Researchers discovered a new phishing campaign that abuses QR codes to redirect targets to phishing landing pages, effectively circumventing security solutions and controls designed to stop such ...

The North Korean APT Kimsuky uses malicious QR codes in spear-phishing attacks targeting academics, government entities, and ...

Kaspersky ( has reported a spike in phishing emails containing malicious QR codes. Detections for these jumped from 46,969 in ...