Dodgy MFA Email Notice Uses QR Codes To Evade Detection

In a novel new scam, phishers are attempting to bypass spam filters by embedding an image of a custom QR code in an email, rather than a link to a phishing page. When scanned by a mobile phone camera, the QR code image will open the phishing page instead. Email filtering services routinely check for malicious URLs or links, so the inclusion of the image is designed to side-step that trip-wire.

How To Avoid QR Code Scams

MFA Bypass: Circumventing the Security Measure

New BEC Phishing Attack Steals Office 365 Credentials and Bypasses MFA

2023 Identity Threat Report: The Unpatchables

Many Ways To Hack MFA

Fake QR codes, be careful out there people : r/Damnthatsinteresting

QR Code Scams & Phishing - Cybersecurity Stop of the Month

Increased QR code attacks via email - B2B Cyber ​​Security

Phishing with QR Codes: How Darktrace Detected and Blocked the Bait

QR Code Scams & Phishing - Cybersecurity Stop of the Month

Protecting Your Business from QR Code Scams

Secure Your Account with Two-Factor Authentication

Information, Free Full-Text