QR Code 'Quishing' Attacks on Execs Surge, Evading Email Security

Abnormal Security reports a sharp rise in QR-code phishing (quishing) in late 2023, with C-suite executives targeted far more than average employees; attackers embed phishing links in QR images to evade filters and lure victims with fake MFA and shared document notifications, primarily to steal credentials that enable inbox rule abuse and account takeover. Although detections have improved since October per Hoxhunt, quishing persists, underscoring the need for layered defenses and sustained user training to mitigate high-impact failures.