QR CODE PHISHING EVOLVES: BARRACUDA UNCOVERS 'QUISHING' ATTACKS USING SPLIT AND NESTED CODES

New techniques in QR-based phishing campaigns evade traditional scanners, highlighting the need for integrated AI defenses

- 

In a stark reminder of how rapidly cyber threats are evolving, Barracuda Networks has uncovered a new wave of QR code phishing attacks, or 'Quishing,' that use split and nested QR codes to evade detection. These sophisticated techniques are designed to bypass traditional email security filters and exploit the growing reliance on mobile devices for scanning QR codes.

Quishing attacks typically embed malicious links within QR codes, redirecting unsuspecting users to fake websites that harvest credentials or sensitive data. But the latest campaigns, analyzed by Barracuda’s threat intelligence team, reveal a disturbing level of innovation.

Split and Nested QR Codes: A New Threat Vector

Barracuda’s report highlights two advanced tactics: