QR Code Phishing Attacks Target Authentication Data and Crypto Wallets

• •10% of email phishing threats bypass security filters.
• •QR codes are used to redirect victims to phishing sites.
• •Malware targets cryptocurrency wallet extensions to steal data.

Phishing attacks using QR codes are increasingly prevalent, with at least 10% of email threats bypassing security filters, according to the HP Threat Insights Report. Attackers send PDF documents with blurred content, prompting victims to scan QR codes that redirect them to phishing sites. Additionally, cybercriminals exploit interest in AI by promoting fake trading agents that install malware on devices. This malware scans for cryptocurrency wallet extensions, replacing them with malicious versions to steal authentication data. The report also highlights the expansion of the Phantom Stealer ecosystem, with the identification of a new malware loader named Phantom Gate. Executable files remain the primary method for delivering malware, accounting for 40% of cases. Users are advised to avoid scanning unsolicited QR codes and to verify website authenticity before entering sensitive information.