Hackers Using Malicious QR Codes for Phishing via HTML Table

Researchers observed a phishing campaign that uses "imageless" QR codes — QR patterns rendered as dense HTML tables of tiny colored cells rather than embedded images — to evade image-based detection and deliver credential-harvesting landing pages; defenders are advised to treat QR lures as first-class phishing indicators, detect unusual HTML constructs, correlate QR-themed language with sender reputation, and enforce stronger authentication for mobile-initiated logins.