Skip to content
NetarxNetarx
Database

Social engineering incidents

276 entries spanning 1995 to 2026. Filter by how the attacker reached the human, what it cost, and whether AI was involved.

View as JSON
Showing 1 of 1 entries
January 8, 2026·GovernmentCampaign

FBI FLASH warns of Kimsuky QR-code spear phishing on think tanks and government

Think tanks, academic institutions and government entities · United States

The FBI issued a FLASH alert on 8 January 2026 warning that North Korean state-sponsored group Kimsuky, also tracked as APT43, was embedding malicious QR codes in spear-phishing emails aimed at think tanks, academics and government bodies. The FBI documented incidents from May and June 2025 in which the group spoofed foreign officials and embassy staff to solicit information from think tank leaders, and redirected targets to fake Google credential pages and bogus document-sharing sites.

QR Code Phishing
Confirmed2 sources

Entry types: Incident, Campaign, Benchmark. Aggregate agency statistics are kept as benchmarks and are never summed into the counters. Methodology. Machine-readable version of this page: impact.netarx.com/api/incidents?q=Kimsuky+%28APT43%29.