ANY.RUN now Automatically Detects QR Codes and Extracts Their Contents

Embedding malicious payloads in QR codes is a phishing strategy increasingly exploited in recent campaigns. Automated defenses often struggle to decode and analyze QR codes, allowing adversaries to leverage these vectors effectively.

Our sandbox now automatically processes QR codes 

ANY.RUN has updated its sandbox to easily detect and analyze malicious content in QR codes within images. 

Now, when the sandbox identifies a QR code containing a link. 

1. The image with the QR code is placed on the desktop of the …

adversaries any.run automated campaigns decode detect effectively exploited malicious phishing processes qr codes run sandbox strategy