QR Code Phishing Targets Employee Performance Reviews
TL;DR. A new email phishing scam leverages QR codes disguised as HR performance review notices to trick employees into divulging login credentials. - The attackers bypass traditional email security by pushing victims to scan QR codes on mobile devices, making link verification harder. - These "quishing" attempts are effective due to urgent language surrounding pay updates, benefits, and deadlines. - Identifying subtle red flags in such communications is crucial for preventing data compromise and unauthorized access.
- QR code phishing (quishing) bypasses traditional email security.
- Scams often use urgent HR-themed messages like performance reviews and benefits updates.
- Scanning QR codes moves the phishing attempt to mobile, where links are harder to verify.
Sources
- QR code email scam targets employee reviews — foxnews.com