The North Korean state-sponsored hacker group Kimsuki is using malicious QR codes in spearphishing campaigns that target U.S.

So, when an attacker sends a fake UCPath payroll notification with a QR code linking to a credential harvesting site, a SEG ...