Quishing and QR code attacks: new threat to your digital security

Author

Serge Parson, Data Governance and Protection Lead, Ergo

Quishing and QR code attacks: new threat to your digital security
In today’s increasingly digital world, cyber threats are evolving rapidly. One of the threats that has gained attention recently is quishing, also known as QR code phishing. From January 1st – August 31st, 2024, 12% of all phishing attacks identified by Egress Defend used a QR code.

What is quishing?

Quishing is a sophisticated phishing technique that leverages the speed and convenience of QR codes. Attackers alter legitimate QR codes or create malicious QR codes that, when scanned, redirect users to phishing websites designed to steal personal information like login credentials, credit card details, or social security numbers. When a victim scans a compromised QR code, they also may be redirected to download malware or even expose their device to vulnerabilities.

Malicious QR codes can be distributed via email. Secure email gateways (SEGs) often fail to detect quishing emails since they cannot check the embedded image. As a result, these emails would bypass this security solution. New QR codes can be generated quickly, making it unlikely they will be recognised or blocked by SEG blocklists.

Source: Egress

Protecting yourself and your organisation from quishing and QR code attacks

While these attacks can be daunting, there are several precautions you can take to safeguard yourself and your organisation:

Be cautious with QR codes:

Verify the Source: Ensure the QR code is from a trusted source.
Avoid Scanning Suspicious Codes: Refrain from scanning codes on public surfaces or from unknown senders.
Use a QR Code Scanner App: Reputable scanner apps can often detect and warn you about malicious codes.

Practice good cyber hygiene:

Be Sceptical of Urgent Requests: Legitimate organisations rarely send urgent requests via email or text.
Verify Links and URLs: Hover your mouse over links to check the actual destination before clicking.
Enable Two-Factor Authentication (2FA): 2FA adds an extra layer of security to your accounts.
Implement Cybersecurity Awareness Training: it can help employees recognise suspicious emails and avoid potential threats.

Keep your devices updated:

Install Security Patches: Regularly update your operating system and software to address vulnerabilities.
Use Strong, Unique Passwords: Avoid using the same password for multiple accounts.
Consider a Security Solution: Antivirus and anti-malware software can help protect your device.

By staying informed and implementing these preventive measures, you can significantly reduce your risk of falling victim to quishing. Remember, vigilance is key in the ever-evolving landscape of cyber threats.

If you have any question on how to protect your organisation from this and other phishing attacks, please do not hesitate to contact us.

Category : Blogs

Author : Serge Parson, Data Governance and Protection Lead, Ergo

Posted : 06.01.2025

Cyber Security

Related Blogs

Blogs

Life at Ergo with Alana Carroll

                            Array
(
    [ID] => 126062
    [id] => 126062
    [title] => Blog Banner 2
    [filename] => Blog-Banner-2.png
    [filesize] => 1576059
    [url] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Blog-Banner-2.png
    [link] => https://ergotechnologygroup.com/insights/blogs/ergo-appoints-sean-mcavinue-as-head-of-ai/attachment/blog-banner-2-2/
    [alt] => 
    [author] => 18
    [description] => 
    [caption] => 
    [name] => blog-banner-2-2
    [status] => inherit
    [uploaded_to] => 118155
    [date] => 2025-12-02 13:48:25
    [modified] => 2025-12-02 13:48:25
    [menu_order] => 0
    [mime_type] => image/png
    [type] => image
    [subtype] => png
    [icon] => https://ergotechnologygroup.com/wp-includes/images/media/default.png
    [width] => 2524
    [height] => 1350
    [sizes] => Array
        (
            [thumbnail] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Blog-Banner-2-150x150.png
            [thumbnail-width] => 150
            [thumbnail-height] => 150
            [medium] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Blog-Banner-2-300x160.png
            [medium-width] => 300
            [medium-height] => 160
            [medium_large] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Blog-Banner-2-768x411.png
            [medium_large-width] => 768
            [medium_large-height] => 411
            [large] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Blog-Banner-2-1024x548.png
            [large-width] => 1024
            [large-height] => 548
            [1536x1536] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Blog-Banner-2-1536x822.png
            [1536x1536-width] => 1536
            [1536x1536-height] => 822
            [2048x2048] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Blog-Banner-2-2048x1095.png
            [2048x2048-width] => 2048
            [2048x2048-height] => 1095
        )

)
1

Blogs

Life at Ergo with Sean McAvinue

Blogs

Ergo Selected as Strategic Partner by UK’s AAT for Microsoft CRM Upgrade to D365

Blogs

Windows Server 2016, A security risk you can’t afford to ignore

                            Array
(
    [ID] => 118835
    [id] => 118835
    [title] => SON6029-(33)
    [filename] => SON6029-33-scaled.jpg
    [filesize] => 500597
    [url] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/SON6029-33-scaled.jpg
    [link] => https://ergotechnologygroup.com/insights/blogs/team-member-spotlight-matthew-kehoe-ux-visual-design-lead/attachment/son6029-33/
    [alt] => 
    [author] => 18
    [description] => 
    [caption] => 
    [name] => son6029-33
    [status] => inherit
    [uploaded_to] => 118834
    [date] => 2025-09-23 11:23:54
    [modified] => 2025-09-23 11:23:54
    [menu_order] => 0
    [mime_type] => image/jpeg
    [type] => image
    [subtype] => jpeg
    [icon] => https://ergotechnologygroup.com/wp-includes/images/media/default.png
    [width] => 2560
    [height] => 2048
    [sizes] => Array
        (
            [thumbnail] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/SON6029-33-150x150.jpg
            [thumbnail-width] => 150
            [thumbnail-height] => 150
            [medium] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/SON6029-33-300x240.jpg
            [medium-width] => 300
            [medium-height] => 240
            [medium_large] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/SON6029-33-768x614.jpg
            [medium_large-width] => 768
            [medium_large-height] => 614
            [large] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/SON6029-33-1024x819.jpg
            [large-width] => 1024
            [large-height] => 819
            [1536x1536] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/SON6029-33-1536x1229.jpg
            [1536x1536-width] => 1536
            [1536x1536-height] => 1229
            [2048x2048] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/SON6029-33-2048x1638.jpg
            [2048x2048-width] => 2048
            [2048x2048-height] => 1638
        )

)
1

Blogs

Team Member Spotlight Matthew Kehoe, UX & Visual Design Lead

                            Array
(
    [ID] => 118491
    [id] => 118491
    [title] => Shelah_McMahon
    [filename] => Shelah_McMahon.jpg
    [filesize] => 67289
    [url] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Shelah_McMahon.jpg
    [link] => https://ergotechnologygroup.com/insights/blogs/the-future-of-public-sector-it/attachment/shelah_mcmahon/
    [alt] => 
    [author] => 18
    [description] => 
    [caption] => 
    [name] => shelah_mcmahon
    [status] => inherit
    [uploaded_to] => 118490
    [date] => 2025-09-19 10:14:39
    [modified] => 2025-09-19 10:14:39
    [menu_order] => 0
    [mime_type] => image/jpeg
    [type] => image
    [subtype] => jpeg
    [icon] => https://ergotechnologygroup.com/wp-includes/images/media/default.png
    [width] => 780
    [height] => 470
    [sizes] => Array
        (
            [thumbnail] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Shelah_McMahon-150x150.jpg
            [thumbnail-width] => 150
            [thumbnail-height] => 150
            [medium] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Shelah_McMahon-300x181.jpg
            [medium-width] => 300
            [medium-height] => 181
            [medium_large] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Shelah_McMahon-768x463.jpg
            [medium_large-width] => 768
            [medium_large-height] => 463
            [large] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Shelah_McMahon.jpg
            [large-width] => 780
            [large-height] => 470
            [1536x1536] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Shelah_McMahon.jpg
            [1536x1536-width] => 780
            [1536x1536-height] => 470
            [2048x2048] => https://ergotechnologygroup.com/wp-content/uploads/2025/09/Shelah_McMahon.jpg
            [2048x2048-width] => 780
            [2048x2048-height] => 470
        )

)
1

Blogs

From cloud-first to cloud-smart: Shaping the future of public sector IT