How are attackers using QR codes in phishing emails and lure documents?
Summary: Cisco Talos Incident Response responded to a QR code phishing campaign for the first time in the fourth quarter of 2023, in which attackers tricked victims into scanning malicious QR codes embedded in phishing emails with personal mobile devices, leading to malware execution on those devices. In a separate attack, adversaries sent spear-phishing emails with QR codes pointing to fake Microsoft Office 365 login pages that steal credentials when entered.
What's compelling: The attack moves off a protected corporate computer onto a personal phone with fewer security controls, and a 2023 survey cited in the source found 97 percent of respondents access work accounts from personal devices.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026