Dodgy MFA Email Notice Uses QR Codes To Evade Detection

In a novel new scam, phishers are attempting to bypass spam filters by embedding an image of a custom QR code in an email, rather than a link to a phishing page. When scanned by a mobile phone camera, the QR code image will open the phishing page instead. Email filtering services routinely check for malicious URLs or links, so the inclusion of the image is designed to side-step that trip-wire.

QR Code Red: Quishing Attacks and How to Prevent Them - Perception Point

Dodgy MFA Email Notice Uses QR Codes To Evade Detection

Free Cybersecurity Tools

Protecting Your Business from QR Code Scams

How attackers exploit QR codes and how to mitigate the risk

Fresh Phish: Malicious QR Codes Are Quickly Retrieving Employee Credentials

Duo Administration - Global Settings

How is everyone mitigating the increase in Microsoft QR Code phishing emails : r/sysadmin

QR Code Red: Quishing Attacks and How to Prevent Them - Perception Point

QR Code Red: Quishing Attacks and How to Prevent Them - Perception Point

Sensors, Free Full-Text

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait