How QR-code phishing can slip past corporate security measures

ESET explains how QR-code phishing (quishing) bypasses corporate security controls and offers guidance for defenders to close the gap.

ESET WeLiveSecurity published an analysis of quishing, describing QR-code phishing as an increasingly popular alternative to traditional phishing. Because QR codes push victims to scan and open links on personal devices, they often evade corporate email security gateways and URL inspection. The article outlines how businesses can close the resulting gap with appropriate security measures and user awareness.

• Quishing lets attackers route victims from QR codes to links on personal devices.
• Personal-device redirects bypass corporate email security and URL scanning.
• ESET recommends control and awareness measures to mitigate QR-code phishing.