Kimsuky Spreads DocSwap Android Malware via QR Phishing Posing as Delivery App
North Korean group Kimsuky uses QR code phishing sites posing as CJ Logistics to spread DocSwap Android malware with RAT capabilities.
More info