Distribution of Qshing Emails Disguised as Payslips

AhnLab SEcurity intelligence Center (ASEC) has recently identified the distribution of Qshing emails impersonating the Ministry of Finance of the People’s Republic of China. Qshing is a compound noun from the words “QR code” and “Phishing” that leads to a malicious app being installed or directs users to a phishing site when a QR code is scanned.

The email being distributed is shown in Figure 1 and is disguised as a paycheck receipt confirmation for the first quarter of 2024. …

ahnlab app asec center china code compound disguised distribution emails finance impersonating intelligence malicious malicious app malware analysis people phishing qr code qshing security security intelligence