Phishing campaign tries to evade defences with QR codes

Threat actors are still using QR codes in phishing campaigns to trick employees into downloading malware or revealing their credentials. The latest campaign included targeting an unnamed major U.S. energy company, according to research released this week by Cofense. Other top industries that have received these phishing messages include manufacturing, insurance, technology, and financial services.

Tessian stopped over 3,000 QR code phishing attacks in just 1 day - Tessian

Email Defenses Under Siege: Phishing Attacks Dramatically Improve

Army warns of QR code scams amid pandemic

Quishing Mitigating QR code phishing threats via email systems

These phishing emails use QR codes to bypass defences and steal Microsoft 365 usernames and passwords

QR codes used to phish for Microsoft credentials

Quishing: The QR code phishing method explained

Massive phishing campaign exploits QR codes to steal Microsoft credentials

Think Before You Scan: The Rise of QR Codes in Phishing