Phishing Security Controls Fully Bypassed Using QR Codes

Mohammad.Poorya

Bardzo aktywny
Ekspert
Dołączył
19 Wrzesień 2018
Posty
3453
Reakcje/Polubienia
13976
Miasto
On a Bike!
Researchers discovered a new phishing campaign that abuses QR codes to redirect targets to phishing landing pages, effectively circumventing security solutions and controls designed to stop such attacks in their tracks.

The crooks behind the phishing attacks which targeted French Cofense customers used a URL encoded in a QR code to circumvent security software which analyzes and blocks suspicious or blacklisted domains.

The phishing emails were camouflage as a SharePoint email with a "Review Important Document" subject line and a message body which would invite potential victims "Scan Bar Code To View Document."
Phishing%20email.jpg


Zaloguj lub Zarejestruj się aby zobaczyć!
 
Do góry