Quishing
Quishing is phishing through a QR code, so the malicious link is hidden in an image that email filters and users cannot read at a glance.
How it works
QR codes appear in emails, PDF attachments, parking meters and posters. Scanning them opens the link on a phone, outside the protections of a work computer.
The destination is usually a credential or payment page; physical stickers over genuine codes are also common.
How to protect yourself
- Check the URL a scanner shows before opening it; be wary of codes in emails and on stickers.
- Decode suspicious codes with a tool that shows the link defanged.