Beware QR code phishing, subscription bombing, and other Grinchy scams this holiday season

A SOC awareness briefing on prevalent holiday scams and phishing campaigns, covering QR-code abuse, subscription bombing (email-DoS and ransomware precursor), fake shipping notifications, CEO impersonation, credential-harvesting portals, and credential stuffing; includes examples seen by the SOC and practical mitigations such as improved email filtering and rate limits, user training, unique passwords, MFA, and reporting suspicious messages.