Blocking phishing emails that use QR codes in O365?

Hi all, running into this growing issue and I'm wondering if anyone else has found any success yet.

I'm finding that phishing scammers are now utilizing QR codes so that there's no tangible hyperlinks in their emails. These emails are coming from legitimate domains, as well, with a handful coming from colleges and universities that had a compromised account.

I've tried grabbing onto text patterns but each new wave uses a completely different premise, so that's simply not effective enough. …

blocking coming cybersecurity domains emails found issue o365 phishing phishing emails qr codes running scammers