Dodgy MFA Email Notice Uses QR Codes To Evade Detection

In a novel new scam, phishers are attempting to bypass spam filters by embedding an image of a custom QR code in an email, rather than a link to a phishing page. When scanned by a mobile phone camera, the QR code image will open the phishing page instead. Email filtering services routinely check for malicious URLs or links, so the inclusion of the image is designed to side-step that trip-wire.

Fresh Phish: Malicious QR Codes Are Quickly Retrieving Employee Credentials

QR Code Red: Quishing Attacks and How to Prevent Them - Perception Point

QR Code Vulnerabilities: Dissecting New Techniques Seen in the Wild - SecurityHQ

Under the Radar – Phishing Using QR Codes to Evade URL Analysis - REAL security

QR Code Red: Quishing Attacks and How to Prevent Them - Perception Point

eSentire The Rise of QR Code Phishing Attacks and Best Practices…

Increased QR code attacks via email - B2B Cyber ​​Security

QR Code Scams & Phishing - Cybersecurity Stop of the Month

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait