QR Code Phishing: Decoding Hidden Threats · Blog · Sublime Security

This report outlines the growing use of QR codes by threat actors for credential phishing and malware delivery, describes observed Microsoft-branded lures, and presents Sublime Security's detection and mitigation approach — including QR decoding, link analysis, redirect history checks, downloaded-file inspection, screenshot scanning, computer-vision logo detection, and MQL-based detection-as-code rules — while recommending defensive measures such as hardware MFA and layered detection.