Security News Kimsuky Spreads DocSwap Android Malware via QR Phishing Posing as Delivery App TheHackerNews Daniel Bender 18 Dec 2025 North Korean group Kimsuky uses QR code phishing sites posing as CJ Logistics to spread DocSwap Android malware with RAT capabilities.