Quishing Campaign Abuses Microsoft Sway to Host Phishing Pages

August 29, 2024 at 06:07AM A recent QR phishing campaign targeting Office 365 users in North America and Asia has been using Microsoft Sway to host phishing pages, as reported by Netskope. The attackers send QR codes to victims, leading them to a fake Microsoft login page to steal credentials. The abuse of Sway and … Read more

QR Codes: Convenience or Cyberthreat?

July 23, 2024 at 01:16PM Summary: Sara Atie’s article discusses the growing threat of QR code-based phishing attacks and the need for organizations to adopt robust protection measures to safeguard against these modern cyber threats. The article highlights common signs of QR code attacks and proposes proactive solutions to mitigate the risk. Key takeaways from … Read more

QR Code ‘Quishing’ Attacks on Execs Surge, Evading Email Security

February 8, 2024 at 04:02PM Email attacks using QR codes surged in Q4 2023, targeting corporate executives and managers. Phishing emails using QR codes, or “quishing,” bypass spam filters, and attackers focus on stealing credentials for privileged users. While quishing has subsided, it remains a threat, emphasizing the need for user training and technical controls … Read more

How Multi-Stage Phishing Attacks Exploit QRs, CAPTCHAs, and Steganography

November 21, 2023 at 06:24AM QR code-based phishing techniques, known as “quishing,” are becoming popular among cybercriminals. By embedding malicious links in QR codes, attackers can bypass spam filters and evade detection. CAPTCHAs are also being exploited in phishing attacks to mask credential-harvesting forms on fake websites. Additionally, steganography is being used to hide malicious … Read more