

In August, 2023 we wrote about a campaign that used QR codes to phish for Micrososft credentials. The use of QR codes in malicious campaigns is not new, and because they can provide contactless access to a product or service they grew in popularity during the pandemic. They are harder to recognize, both by email filters and by the person on the receiving end. Since QR (Quick Response) codes are basically two-dimensional barcodes that hold encoded data, they can be used to work as a link.īut using QR codes has a few advantages for phishers. Quishing is the contraction used by some security vendors for QR code based phishing.
