Messages that look like they come from banks, couriers or government agencies link to fake sites or data-stealing apps. QR codes in emails slip past traditional link filters and push users onto phones that lack corporate protection.
How to defend
- Tell staff and customers you never send password links by SMS
- Use email filtering that decodes QR codes
- Enforce MDM and block sideloaded apps on work phones
- Include smishing and quishing in phishing simulations
Trend analysis by the Cybershield Threat Intelligence team.