Quishing for trouble. [Research Saturday]

CyberWire Daily

N2K Networks, Inc.

Daily News, Tech News, News, Technology

4.6 • 1K Ratings

🗓️ 21 December 2024

⏱️ 15 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Adam Khan, VP of Security Operations at Barracuda, joins to discuss his team's work on "The evolving use of QR codes in phishing attacks." Cybercriminals are evolving phishing tactics by embedding QR codes, or “quishing,” into PDF documents attached to emails, tricking recipients into scanning them to access malicious websites that steal credentials. Barracuda researchers found over half a million such emails from June to September 2024, with most impersonating brands like Microsoft, DocuSign, and Adobe to exploit urgency and trust. To counter these attacks, businesses should deploy multilayered email security, use AI-powered detection tools, educate employees on QR code risks, and enable multifactor authentication to safeguard accounts. The research can be found here: Threat Spotlight: The evolving use of QR codes in phishing attacks Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the Cyberwire Network, powered by N2K.
0:09.7	Do you know the status of your compliance controls right now? Like right now.
0:18.1	We know that real-time visibility is critical for security, but when it comes to
0:22.6	our GRC programs, we rely on point-in-time checks. But get this, more than 8,000 companies
0:29.9	like Atlassian and Quora have continuous visibility into their controls with Vanta. Here's the
0:36.4	gist. Vanta brings automation to evidence collection across 30 frameworks,
0:41.5	like SOC2 and ISO-271.
0:45.6	They also centralize key workflows like policies, access reviews, and reporting,
0:51.1	and helps you get security questionnaires done five times faster with AI.
0:56.2	Now, that's a new way to GRC.
0:59.2	Get $1,000 off Vanta when you go to Vanta.com slash cyber.
1:04.9	That's Vanta.com slash cyber for $1,000 off.
1:30.7	We don't see QR codes being attached or shared, but it is becoming more prevalent in our day-to-day lives.
1:34.0	When we are going to even certain restaurants,
1:35.7	they don't even have a menu anymore.
1:37.4	They give you a QR code. And when it comes to emails, more and more companies are trying to use QR codes,
1:43.0	but it's a fast way to engage.
1:50.9	That's Adam Khan, VP of Security Operations at Barracuda.
1:55.7	The research we're discussing today is titled The Evolving Use of QR Codes in Fishing Attacks.
2:08.1	You know, as tactics are evolving when it comes to fishing, and our researchers are always digging
2:14.6	into how cybercriminals are advancing and utilizing new tactics and
2:20.2	techniques. And the data that proves over, as you saw in the article, over half a million
	...

Transcript will be available on the free plan in -55 days. Upgrade to see the full transcript now.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.