Dodgy MFA Email Notice Uses QR Codes To Evade Detection

In a novel new scam, phishers are attempting to bypass spam filters by embedding an image of a custom QR code in an email, rather than a link to a phishing page. When scanned by a mobile phone camera, the QR code image will open the phishing page instead. Email filtering services routinely check for malicious URLs or links, so the inclusion of the image is designed to side-step that trip-wire.

Important Security Notice Email Scam - Removal and recovery steps

How is everyone mitigating the increase in Microsoft QR Code phishing emails : r/sysadmin

New Quishing Campaign Shows How Security Can Be Bypassed

Be Alert for Phishy Catch.com.au Order Shipping Emails

How QR Codes Are Used in a New Phishing Attack, Next7 IT

Why you shouldn't scan QR codes in emails

Is it possible to block emails containing QR CODE? - Microsoft Community Hub

Fresh Phish: Malicious QR Codes Are Quickly Retrieving Employee Credentials

Secure Your Account with Two-Factor Authentication

Quishing: What you need to know about QR code email attacks

MFA prompt spamming/ MFA fatigue - What can you do to prevent/ detect attacks?