Dodgy MFA Email Notice Uses QR Codes To Evade Detection

In a novel new scam, phishers are attempting to bypass spam filters by embedding an image of a custom QR code in an email, rather than a link to a phishing page. When scanned by a mobile phone camera, the QR code image will open the phishing page instead. Email filtering services routinely check for malicious URLs or links, so the inclusion of the image is designed to side-step that trip-wire.

Massive phishing campaign using QR codes targets energy sector

What is Credential Phishing?

Protecting Your Business from QR Code Scams

QR Code Phishing –What Is It?

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait

QR Code Scams & Phishing - Cybersecurity Stop of the Month

Think Twice Before Scanning That QR Code – InterWest Insurance Services

eSentire The Rise of QR Code Phishing Attacks and Best Practices…

QR Code Red: Quishing Attacks and How to Prevent Them - Perception Point

How is everyone mitigating the increase in Microsoft QR Code phishing emails : r/sysadmin

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait

Swimming past 2FA, part 1: How to spot an Okta MITM phishing attack

QR code security risks: innocent scan or malicious scam? - Corrata