Modern QR code phishing evasion tactics you should know about · Blog · Sublime Security

This blog post analyzes QR-code-based phishing campaigns and demonstrates multiple evasion techniques (low contrast, color changes, skewing, ASCII rendering, incomplete/split images and embedding in attachments) that allow attackers to bypass automated scanners while remaining human-readable; it also describes Sublime's iterative analysis pipeline—multiple QR scanners, image processing, and ML-powered computer vision—that improved resolution rates and flagged these campaigns as malicious.