Dodgy MFA Email Notice Uses QR Codes To Evade Detection

In a novel new scam, phishers are attempting to bypass spam filters by embedding an image of a custom QR code in an email, rather than a link to a phishing page. When scanned by a mobile phone camera, the QR code image will open the phishing page instead. Email filtering services routinely check for malicious URLs or links, so the inclusion of the image is designed to side-step that trip-wire.

Think Twice Before Scanning That QR Code – InterWest Insurance Services

QR Code Red: Quishing Attacks and How to Prevent Them - Perception Point

QR Code Phishing –What Is It?

How to Protect Yourself From Malicious QR Codes

New Quishing Campaign Shows How Security Can Be Bypassed

Free Cybersecurity Tools

Rogue QR Codes Steal Microsoft Credentials and Crypto Funds

Secure Your Account with Two-Factor Authentication

Quishing: What you need to know about QR code email attacks

Important Security Notice Email Scam - Removal and recovery steps

Fresh Phish: Malicious QR Codes Are Quickly Retrieving Employee Credentials

Recieving increasing number of phishing attempts mimicking Microsoft MFA QR Codes - Microsoft Community Hub

MFA Bypass: Circumventing the Security Measure

Bloomberg Reports: Stealth QR Code Phishing Attack On Major US Energy Company

Cyber Threat Intelligence Briefing - July 3, 2023