• At least two threat groups identified, one of which Netcraft can link to customs tax and postal scams carried out earlier this year.
• Up to 10,000 potential victims identified visiting this group’s phishing websites between June 19 and August 23.
• At least 2,000 form submissions, indicating how much personal data has been extracted from victims, including payment information.
• Evidence suggesting the group is running activity across Europe, including France, Germany, Italy, and Switzerland.

In this blog, we explore the modus operandi of threat actors utilizing QR code attacks, by examining recent and widespread quishing campaigns detected by Trellix.