Perception Point Introduces First-to-Market Solution to Combat Rising QR Code Phishing Threats

Perception Point, a provider of advanced threat prevention across digital communication channels,  unveiled its first-of-its-kind solution to address the escalating threat of QR code phishing, commonly referred to as "quishing". With the recent influx in quishing campaigns, the need for a definitive solution has never been more pressing.

The re-emergence of QR codes during the COVID-19 pandemic, not only changed the way users interact with digital content but also provided cybercriminals with a novel avenue for evading detection. In 2023, quishing attacks surged dramatically, targeting and successfully breaching organizations of all sizes. Leveraging the conditioned trust many have developed for QR codes, threat actors are launching email campaigns that ingeniously exploit human behavior and social engineering techniques, often impersonating trusted brands like Microsoft to lure targets into divulging their login credentials.

Within the past month, Perception Point successfully prevented quishing campaigns targeting over 25% of its diverse range of customers, encompassing small organizations with as few as 10 users to large enterprises with tens of thousands of employees. 90% of the thwarted attacks targeted users operating within Microsoft 365 email environments.

A key psychological element that drives the success of quishing attacks involves shifting the playground from a computer screen onto a mobile device. Once people hold their phones after scanning the QR code, they are primed for additional steps that pertain to their personal device. Consequently, taking actions like going through Multi-Factor Authentication (MFA) seem more natural, immediate and less likely to arouse suspicion. The deceptive simplicity of these attacks allows them to easily bypass most email security systems.

Unlike other email security vendors that often recommend employee training and the use of MFA as the primary defense against quishing, Perception Point is taking a proactive approach to stop malicious QR code campaigns at their source to prevent them from ever reaching the user's inbox. Perception Point's Advanced Email Security now employs a unique image recognition model that identifies and scans the QR codes in near real-time, extracting links and following them to dynamically scan for phishing or malware delivery attempts.