A New Tactic in the Rapid Evolution of QR Code Scams

Check Point researchers describe the rapid evolution of QR code phishing (“quishing”) from simple MFA re-authentication lures to conditional routing and, most recently, HTML/ASCII-rendered QR codes designed to evade OCR-based email defenses; more than 600 such emails were observed since late May. The report highlights how attackers dynamically tailor branding and device-specific links, and recommends controls including automatic QR decoding and URL analysis, rewriting embedded QR links to safe redirects, and AI-driven multi-signal phishing detection, aligning with rising awareness and warnings (e.g., FTC alerts) about QR-based scams.