Dodgy MFA Email Notice Uses QR Codes To Evade Detection

In a novel new scam, phishers are attempting to bypass spam filters by embedding an image of a custom QR code in an email, rather than a link to a phishing page. When scanned by a mobile phone camera, the QR code image will open the phishing page instead. Email filtering services routinely check for malicious URLs or links, so the inclusion of the image is designed to side-step that trip-wire.

9 Tips To Spot A Fake QR Code Scam

2023 Identity Threat Report: The Unpatchables

QR Code Red: Quishing Attacks and How to Prevent Them - Perception Point

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait

Your Account Is Set To Close Email Scam - Removal and recovery steps (updated)

Massive phishing campaign using QR codes targets energy sector

Dodgy MFA Email Notice Uses QR Codes To Evade Detection

Multi-factor authentication: How to enable 2FA and boost your security

What is Credential Phishing?

Is Microsoft Defender sufficient as virus protection?

Think Twice Before Scanning That QR Code – InterWest Insurance Services

Quishing: What you need to know about QR code email attacks

Bloomberg Reports: Stealth QR Code Phishing Attack On Major US Energy Company