Dodgy MFA Email Notice Uses QR Codes To Evade Detection

In a novel new scam, phishers are attempting to bypass spam filters by embedding an image of a custom QR code in an email, rather than a link to a phishing page. When scanned by a mobile phone camera, the QR code image will open the phishing page instead. Email filtering services routinely check for malicious URLs or links, so the inclusion of the image is designed to side-step that trip-wire.

Dodgy MFA Email Notice Uses QR Codes To Evade Detection

Would You Like to Allow Malware?': When Notification Popups Go Bad - The Media Trust

SE Labs

Is Microsoft Defender sufficient as virus protection?

The 3 Best Two-Factor Authentication Apps of 2023

Sensors, Free Full-Text

Evil QR - Phishing With QR Codes

Dodgy MFA Email Notice Uses QR Codes To Evade Detection

Bloomberg Reports: Stealth QR Code Phishing Attack On Major US Energy Company

QR Code Scams & Phishing - Cybersecurity Stop of the Month

Cybersecurity Search Engine