Phishing Security Controls Fully Bypassed Using QR Codes

[Mohammad.Poorya]

Researchers discovered a new phishing campaign that abuses QR codes to redirect targets to phishing landing pages, effectively circumventing security solutions and controls designed to stop such attacks in their tracks.

The crooks behind the phishing attacks which targeted French Cofense customers used a URL encoded in a QR code to circumvent security software which analyzes and blocks suspicious or blacklisted domains.

The phishing emails were camouflage as a SharePoint email with a "Review Important Document" subject line and a message body which would invite potential victims "Scan Bar Code To View Document."

https://www.bleepingcomputer.com/news/se...-qr-codes/