Views:

Detect phishing by scanning the QR codes in email body and attachments

Quishing, also known as QR code phishing, is a type of phishing that uses QR codes to deceive users into visiting malicious websites and revealing sensitive information. To protect your organization against quishing attacks, Cloud App Security can scan the QR codes in the email body and attachments for security threats.
Supported Service
Supported File Format
Configuration
Exchange Online
  • JPG
  • PNG
  • BMP
  • TIFF
  • GIF
  • WEBP
To enable QR code scanning for these file formats, in your Advanced Threat Protection policy, enable Web Reputation and then Message Attachments in the rule settings.
  • PDF
To enable QR code scanning for this file type, enable Virtual Analyzer in your Advanced Threat Protection policy.
Cloud App Security also provides visibility into the quishing emails detected in your environment. For details, see Quishing widgets.