TEL AVIV, Israel, September 7, 2023 – Perception Point, a leading provider of advanced threat prevention across digital communication channels, today unveiled its first-of-its-kind solution to address the escalating threat of QR code phishing, commonly referred to as “quishing”. With the recent influx in quishing campaigns, the need for a definitive solution has never been more pressing.

The re-emergence of QR codes during the COVID-19 pandemic, not only changed the way users interact with digital content but also provided cybercriminals with a novel avenue for evading detection. In 2023, quishing attacks surged dramatically, targeting and successfully breaching organizations of all sizes. Leveraging the conditioned trust many have developed for QR codes, threat actors are launching email campaigns that ingeniously exploit human behavior and social engineering techniques, often impersonating trusted brands like Microsoft to lure targets into divulging their login credentials.

Within the past month, Perception Point successfully prevented quishing campaigns targeting over 25% of its diverse range of customers, encompassing small organizations with as few as 10 users to large enterprises with tens of thousands of employees. 90% of the thwarted attacks targeted users operating within Microsoft 365 email environments.

A key psychological element that drives the success of quishing attacks involves shifting the “playground” from a computer screen onto a mobile device. Once people hold their phones after scanning the QR code, they are primed for additional steps that pertain to their personal device. Consequently, taking actions like going through Multi-Factor Authentication (MFA) seem more natural, immediate and less likely to arouse suspicion. The deceptive simplicity of these attacks allows them to easily bypass most email security systems.

Unlike other email security vendors that often recommend employee training and the use of MFA as the primary defense against quishing, Perception Point is taking a proactive approach to stop malicious QR code campaigns at their source to prevent them from ever reaching the user’s inbox. Perception Point’s Advanced Email Security now employs a unique image recognition model that identifies and scans the QR codes in near real-time, extracting links and following them to dynamically scan for phishing or malware delivery attempts. 

Key Features of Perception Point’s Quishing Prevention:

  • Real-time Image Recognition: Identifies and extracts all QR codes from the email body and Office file attachments.
  • Anti-Evasion Algorithm: Dynamically follows and scans URLs embedded within the QR codes. Unpacks content into smaller units (files and URLs) to overcome evasion techniques and identify hidden malicious payloads.
  • Robust Anti-Malware Detection: Patented CPU-level technology that deterministically blocks attacks in seconds at the exploit phase pre-malware release/execution. 

Peleg Cabra, Senior Product Marketing Manager at Perception Point, commented, “The threat landscape is constantly escalating, and with it, the tactics employed by threat actors. The rise of quishing is a testament to the ingenuity of cybercriminals, and requires cybersecurity vendors to stay ahead of the curve. The availability of our Advanced Email Security quishing prevention capabilities demonstrates our agility and commitment to safeguarding our customers against the most novel threats.”

Learn more about the solution: QR Code Red: Quishing Attacks and How to Prevent Them

About Perception Point:

Perception Point is a Prevention-as-a-Service company for the fastest and most accurate next-generation detection and response to all attacks across email, cloud collaboration channels, and web browsers. The solution’s natively integrated incident response service acts as a force multiplier to the SOC team, reducing management overhead, improving user experience and delivering continuous insights; providing proven best protection for all organizations.

Deployed in minutes, with no change to the enterprise’s infrastructure, the patented, AI-powered, and easy-to-use solution replaces cumbersome legacy systems to prevent phishing, BEC, spam, malware, zero-days, ATO, and other advanced attacks well before they reach end-users. Fortune 500 enterprises and organizations across the globe are preventing the most advanced attacks across their email, browsers and cloud collaboration channels with Perception Point.

To learn more about Perception Point, visit our website, or follow us on LinkedIn, Facebook, and Twitter.

Media Contact
Ben Crome

Headline Media

[email protected] 

+1 914 336 4922