Malicious QR Code
The message contains a QR code that leads somewhere, such as a web page. Scanning it moves the visit to a phone, often outside the protections of a work computer.
Also known as
- Aliases
-
- quishing
- QR code scam
- QR code phishing
Mapped to
MITRE ATT&CK®
Sub-techniques
TE0018.1
Constructed QR Code
The QR code is drawn with many small blocks in the message's layout code (HTML), which only look like an image. Security tools that scan images for QR codes can miss a code built this way.
TE0018.2
Image QR Code
The QR code is a picture embedded in or attached to the message. A web address inside an image isn't readable as text, so it can be harder for email filters to check.