The FBI has warned that a North Korean cybercrime group known for its prolific espionage operations is using QR codes to launch spear-phishing attacks against U.S. and foreign government entities and other institutions.

The Pyongyang-backed actor Kimsuky targeted nongovernmental organizations, think tanks, academia and foreign policy experts by embedding malicious QR codes in phishing emails in May and June, the bureau said in an alert on Thursday.

Using this technique known as quishing (QR code phishing), Kimsuky emailed a think tank head in May and pretended to be a foreign advisor seeking insight on recent developments on the Korean Peninsula,