Captchas, QR codes, and Clever Evasion: New Phishing Tactics are Gaining Traction

Several sophisticated phishing campaigns are currently spreading fast that pose challenges for detection. 

Crooks are increasingly using captchas and QR codes to mask malicious content. The goal is adding another step, which requires human interaction — instead of directly embedding or linking to a payload or using elements that bypass email spam filters, as is the case with “quishing”. 

As of this writing, you can easily find examples of these campaigns on ANY. RUN’s public submissions database. We’re observing more …

campaigns captchas challenges detection evasion fast human malicious payload phishing qr codes tactics