What is quishing?
Quishing, or QR code phishing, hides a malicious link inside a QR code, in an email, a PDF, a poster or a parking meter sticker. Scanning it opens a fake sign-in page or a malicious site on the target’s phone.
How it works
QR codes are images, so many email filters do not read the link inside. Scanning moves the visit from a managed laptop to a phone that may have fewer protections.
Common lures include “re-authenticate your MFA”, shared document notices and payment pages.
Why it matters
Quishing sidesteps link scanning and endpoint protection at once. Simulations that include QR codes prepare people for a lure they may not think of as phishing.
How Living Security helps
Living Security Phishing includes QR code simulations alongside email, SMS, voice and calendar invites.
