Dodgy MFA Email Notice Uses QR Codes To Evade Detection

In a novel new scam, phishers are attempting to bypass spam filters by embedding an image of a custom QR code in an email, rather than a link to a phishing page. When scanned by a mobile phone camera, the QR code image will open the phishing page instead. Email filtering services routinely check for malicious URLs or links, so the inclusion of the image is designed to side-step that trip-wire.

eSentire The Rise of QR Code Phishing Attacks and Best Practices…

QR Code Fraud: What is it and How Can You Protect Yourself?

Increased QR code attacks via email - B2B Cyber ​​Security

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait

New Quishing Campaign Shows How Security Can Be Bypassed

What is Credential Phishing?

How is everyone mitigating the increase in Microsoft QR Code phishing emails : r/sysadmin

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait

Under the Radar – Phishing Using QR Codes to Evade URL Analysis - REAL security

Sensors, Free Full-Text

Be Alert for Phishy Catch.com.au Order Shipping Emails

Bloomberg Reports: Stealth QR Code Phishing Attack On Major US Energy Company

How is everyone mitigating the increase in Microsoft QR Code phishing emails : r/sysadmin

Important Security Notice Email Scam - Removal and recovery steps