Quishing (QR Code Phishing)
A form of phishing that uses malicious QR codes to bypass text-based email filters and redirect users to credential harvesting sites.
Overview
Quishing has exploded in popularity because traditional Secure Email Gateways (SEGs) cannot 'read' images to scan the underlying URLs. Attackers embed malicious QR codes in PDF attachments or directly in the email body, tricking users into scanning them with their mobile devices, thus bypassing corporate network security. PhiShark's Agentic AI neutralizes Quishing by employing advanced Computer Vision to autonomously detect, extract, and detonate QR codes in a secure sandbox, validating the final destination URL before the user ever sees the email.
Real-World Examples
- ▸Fake Microsoft MFA update emails containing a QR code
- ▸Fraudulent parking ticket or delivery notices requiring a QR scan
- ▸PDF attachments with embedded QR codes for 'secure document access'
Related Terms
Protect Against Quishing (QR Code Phishing)
PhiShark's agentic AI detects and analyzes threats in real-time
Start Free Trial