Dodgy MFA Email Notice Uses QR Codes To Evade Detection

In a novel new scam, phishers are attempting to bypass spam filters by embedding an image of a custom QR code in an email, rather than a link to a phishing page. When scanned by a mobile phone camera, the QR code image will open the phishing page instead. Email filtering services routinely check for malicious URLs or links, so the inclusion of the image is designed to side-step that trip-wire.

Don't call it quishing: QR code phishing on the rise

New Quishing Campaign Shows How Security Can Be Bypassed

MFA prompt spamming/ MFA fatigue - What can you do to prevent/ detect attacks?

Heads up] FBI Warns About Attacks That Bypass Your Multi-factor Authentication (MFA)

QR Code Red: Quishing Attacks and How to Prevent Them - Perception Point

New BEC Phishing Attack Steals Office 365 Credentials and Bypasses MFA

Defending Against QR Code Phishing

Think Twice Before Scanning That QR Code – InterWest Insurance Services

How to mitigate MFA fatigue and learn from the Uber breach for additional protection