{"id":13983,"date":"2024-10-24T13:39:52","date_gmt":"2024-10-24T12:39:52","guid":{"rendered":"https:\/\/www.kappadata.pl\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/"},"modified":"2024-10-24T13:39:58","modified_gmt":"2024-10-24T12:39:58","slug":"clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security","status":"publish","type":"post","link":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/","title":{"rendered":"Clever phishing techniques: QR codes with ASCII and Blob URIs that bypass security"},"content":{"rendered":"

[vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern”][vc_column][vc_empty_space][vc_column_text]
\nLearn how cybercriminals exploit QR codes.
\n[\/vc_column_text][vc_empty_space][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern”][vc_column][vc_separator type=”normal” color=”#a5a5a5″][vc_empty_space][vc_column_text]<\/p>\n

\n
\n
\n
\n

Even the most carefully planned phishing campaigns fail if cybercriminals cannot bypass security measures.<\/p>\n

In a blog post on the Barracuda website, Ashitosh Deshnur (Associate Threat Analyst in the Threat Analyst Team at Barracuda Networks) presents two innovative security bypass techniques recently identified by Barracuda\u2019s threat analysts:<\/p>\n

The first technique involves QR codes that, instead of being a static image, are built using a combination of ASCII\/Unicode “block (\u2588)” characters. This tactic aims to prevent security software from extracting the malicious URL from the QR code.<\/p>\n

The second technique involves the use of “Blob” (binary large object) URIs (uniform resource identifiers), which access locally generated data within the browser, rather than relying on known malicious domains. These Blob URIs are created dynamically and can expire quickly, making them harder to track and analyze. Moreover, since some security mechanisms do not scrutinize Blob URIs as thoroughly as traditional HTTP or HTTPS links, phishing attacks using these URIs can bypass basic detection methods.<\/p>\n

A New Generation of Malicious QR Codes<\/h3>\n

A year ago, phishing attacks using QR codes surged significantly. Barracuda data shows that approximately 1 in 20 mailboxes were targeted by QR code attacks in the last quarter of 2023.<\/p>\n

These attacks typically used static, image-based QR codes. Attackers embedded malicious links into these codes, encouraging users to scan them, which led to fake websites designed to resemble trusted services or applications.<\/p>\n

Security measures quickly adapted. Tools such as Optical Character Recognition (OCR) were able to extract, analyze, and block malicious URLs contained in QR codes.<\/p>\n

Barracuda’s threat analysts, during testing, identified a new generation of QR code phishing designed to bypass OCR-based defenses. In these attacks, the \u201cimage\u201d of the QR code is created using ASCII\/Unicode characters.<\/p>\n

In an email, such a QR code appears like a traditional QR code. However, to a typical OCR detection system, it seems meaningless.<\/p>\n

Example 1<\/h4>\n

A phishing attack poses as a “Payroll and Benefits Registration” file, shared by an Administrator. When the unsuspecting recipient scans the QR code and clicks the link, they are redirected to a fake Microsoft login page.<\/p>\n

A closer inspection of the QR code reveals a line between each block. This happens because the QR code is not an image, but carefully crafted using the “full block” character, or “\u2588.”<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
<\/div>\n
4o<\/span><\/div>\n<\/div>\n<\/div>\n<\/div>\n

[\/vc_column_text][vc_empty_space]

\"\"

<\/h3><\/span><\/div>[vc_empty_space][vc_column_text]<\/p>\n
\n
\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n
\n

The QR code is a 49×49 matrix composed of “full blocks” (\u2588).<\/p>\n

What was done to make the QR code look convincing?<\/h3>\n

In areas where white spaces are required, a cascading style sheet (CSS) was used to make the color of the block text fully transparent, rendering them invisible.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

[\/vc_column_text][vc_empty_space]

\"\"

<\/h3><\/span><\/div>[vc_empty_space][vc_column_text]<\/p>\n
\n
\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n
\n

The QR code is a 49×49 matrix composed of “full blocks” (\u2588).<\/p>\n

What was done to make the QR code look convincing?<\/h3>\n

In areas where white spaces are required, a cascading style sheet (CSS) was used to make the color of the block text fully transparent, rendering them invisible.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

[\/vc_column_text][vc_empty_space]

\"\"

<\/h3><\/span><\/div>[vc_empty_space][vc_column_text]Example 2
\nIn this case, the attacker impersonates the courier company DHL and asks the recipient to fill out a form after scanning the QR code. Upon scanning the code, the victim is unexpectedly redirected to a phishing site.[\/vc_column_text][vc_empty_space]
\"\"

<\/h3><\/span><\/div>[vc_empty_space][vc_column_text]Another important point is that, in the case of HTML entities, each “block” can have multiple representations, and attackers can use single blocks or combinations of them to generate QR codes based on ASCII\/Unicode.<\/p>\n

All of this increases the possibilities for combinations, making ASCII-based QR codes particularly difficult to detect.<\/p>\n

Barracuda highlights that if security technologies identify the potential use of ASCII QR codes in a phishing attack, one of the simplest solutions is to take a screenshot of the phishing email and pass it to an OCR engine to read the URL hidden behind the QR code.<\/p>\n

The Vast Potential of Blob URI to Bypass Security Measures<\/h3>\n

Blob URIs (also known as Blob URLs or Object URLs) are used by browsers to represent binary data or file-like objects (called Blobs) that are temporarily stored in the browser’s memory.<\/p>\n

Blob URIs allow web developers to work with binary data, such as images, videos, or files, without having to upload or download them from an external server.<\/p>\n

Because Blob URIs don\u2019t retrieve data from external URLs, traditional URL filtering and scanning tools may initially fail to recognize the content as malicious.<\/p>\n

Cybercriminals create phishing pages using Blob URIs, hoping that detection systems will have a harder time identifying and blocking malicious content.<\/p>\n

One of the first examples of a phishing attack using Blob URIs, identified by Barracuda\u2019s threat analysts, involved impersonating Capital One, encouraging users to click \u201cCheck your account.\u201d This redirected them to an intermediary phishing page that generated a Blob URI and quickly redirected the browser to the newly created address.[\/vc_column_text][vc_empty_space]

\"\"

<\/h3><\/span><\/div>[vc_empty_space][vc_column_text]What does a Blob URI do?<\/p>\n

It displays a fake Capital One login page to the victim.[\/vc_column_text][vc_empty_space]

\"\"

<\/h3><\/span><\/div>[vc_empty_space][vc_column_text]Threat analysts, during various tests, also noticed that the Blob URI technique was used in phishing attacks impersonating Chase and Air Canada.<\/p>\n

Summary<\/h3>\n

Phishing techniques to evade detection have evolved significantly, posing an increasing threat to organizations. Cybercriminals are constantly improving their methods to bypass traditional security measures. As phishing attacks become more sophisticated, it is essential to implement multilayered defense strategies and promote a strong security culture.<\/p>\n

Megharaj Balaraddi, Associate Threat Analyst at Barracuda, also contributed to the research for this blog post. The original article can be found on the Barracuda Blog<\/strong>.[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

A new generation of malicious QR codes
\nA year ago, there was a sharp increase in phishing attacks based on QR codes. Barracuda data shows that about 1 in 20 mailboxes were targeted by QR code attacks in the last quarter of 2023.
\nThese attacks typically used static, image-based QR codes. Attackers embedded malicious links in the QR codes and encouraged users to scan them, leading them to fake websites designed to look like trusted services or applications.<\/p>\n","protected":false},"author":26,"featured_media":13953,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[168,75,71],"tags":[364,365,270,366,363,185,296,298],"class_list":["post-13983","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-barracuda-en","category-news","category-publications","tag-asciiqr-en","tag-bloburi-en","tag-cybersecurity-en","tag-networksecurity-en","tag-phishing-en","tag-cyberbezpieczenstwo-en","tag-hacker-attacks","tag-it-security"],"acf":[],"yoast_head":"\nNew phishing techniques: ASCII QR codes and Blob URIs \u2013 how attackers bypass security measures<\/title>\n<meta name=\"description\" content=\"A new generation of malicious QR codes A year ago, there was a significant increase in phishing attacks based on QR codes. Barracuda data shows that approximately 1 in 20 mailboxes were targeted by QR code attacks in the last quarter of 2023. These attacks typically used static, image-based QR codes. Attackers embedded malicious links in QR codes and encouraged users to scan them, leading them to fake websites designed to look like trusted services or applications\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New phishing techniques: ASCII QR codes and Blob URIs \u2013 how attackers bypass security measures\" \/>\n<meta property=\"og:description\" content=\"A new generation of malicious QR codes A year ago, there was a significant increase in phishing attacks based on QR codes. Barracuda data shows that approximately 1 in 20 mailboxes were targeted by QR code attacks in the last quarter of 2023. These attacks typically used static, image-based QR codes. Attackers embedded malicious links in QR codes and encouraged users to scan them, leading them to fake websites designed to look like trusted services or applications\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Kappa Data\" \/>\n<meta property=\"article:published_time\" content=\"2024-10-24T12:39:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-24T12:39:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2024\/10\/Dolacz-do-nas-2024-4.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1228\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Ola Serafin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ola Serafin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/\"},\"author\":{\"name\":\"Ola Serafin\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/#\\\/schema\\\/person\\\/d1b118980a9e892e9128e0dec942a300\"},\"headline\":\"Clever phishing techniques: QR codes with ASCII and Blob URIs that bypass security\",\"datePublished\":\"2024-10-24T12:39:52+00:00\",\"dateModified\":\"2024-10-24T12:39:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/\"},\"wordCount\":1123,\"image\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.kappadata.pl\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/Dolacz-do-nas-2024-4.png\",\"keywords\":[\"#ASCIIQR\",\"#BlobURI\",\"#cybersecurity\",\"#NetworkSecurity\",\"#Phishing\",\"cyberbezpiecze\u0144stwo\",\"Hacker attacks\",\"IT security\"],\"articleSection\":[\"Barracuda\",\"News\",\"publications\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/\",\"url\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/\",\"name\":\"New phishing techniques: ASCII QR codes and Blob URIs \u2013 how attackers bypass security measures\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.kappadata.pl\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/Dolacz-do-nas-2024-4.png\",\"datePublished\":\"2024-10-24T12:39:52+00:00\",\"dateModified\":\"2024-10-24T12:39:58+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/#\\\/schema\\\/person\\\/d1b118980a9e892e9128e0dec942a300\"},\"description\":\"A new generation of malicious QR codes A year ago, there was a significant increase in phishing attacks based on QR codes. Barracuda data shows that approximately 1 in 20 mailboxes were targeted by QR code attacks in the last quarter of 2023. These attacks typically used static, image-based QR codes. Attackers embedded malicious links in QR codes and encouraged users to scan them, leading them to fake websites designed to look like trusted services or applications\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.kappadata.pl\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/Dolacz-do-nas-2024-4.png\",\"contentUrl\":\"https:\\\/\\\/www.kappadata.pl\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/Dolacz-do-nas-2024-4.png\",\"width\":1920,\"height\":1228},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Strona g\u0142\u00f3wna\",\"item\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"publikacje\",\"item\":\"https:\\\/\\\/www.kappadata.pl\\\/category\\\/publikacje\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Clever phishing techniques: QR codes with ASCII and Blob URIs that bypass security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/#website\",\"url\":\"https:\\\/\\\/www.kappadata.pl\\\/\",\"name\":\"Kappa Data\",\"description\":\"The Art of IT-infrastucture, security and IoT distribution\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.kappadata.pl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/#\\\/schema\\\/person\\\/d1b118980a9e892e9128e0dec942a300\",\"name\":\"Ola Serafin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g\",\"caption\":\"Ola Serafin\"},\"sameAs\":[\"http:\\\/\\\/kappadata.pl\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New phishing techniques: ASCII QR codes and Blob URIs \u2013 how attackers bypass security measures","description":"A new generation of malicious QR codes A year ago, there was a significant increase in phishing attacks based on QR codes. Barracuda data shows that approximately 1 in 20 mailboxes were targeted by QR code attacks in the last quarter of 2023. These attacks typically used static, image-based QR codes. Attackers embedded malicious links in QR codes and encouraged users to scan them, leading them to fake websites designed to look like trusted services or applications","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/","og_locale":"en_US","og_type":"article","og_title":"New phishing techniques: ASCII QR codes and Blob URIs \u2013 how attackers bypass security measures","og_description":"A new generation of malicious QR codes A year ago, there was a significant increase in phishing attacks based on QR codes. Barracuda data shows that approximately 1 in 20 mailboxes were targeted by QR code attacks in the last quarter of 2023. These attacks typically used static, image-based QR codes. Attackers embedded malicious links in QR codes and encouraged users to scan them, leading them to fake websites designed to look like trusted services or applications","og_url":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/","og_site_name":"Kappa Data","article_published_time":"2024-10-24T12:39:52+00:00","article_modified_time":"2024-10-24T12:39:58+00:00","og_image":[{"width":1920,"height":1228,"url":"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2024\/10\/Dolacz-do-nas-2024-4.png","type":"image\/png"}],"author":"Ola Serafin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ola Serafin","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/#article","isPartOf":{"@id":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/"},"author":{"name":"Ola Serafin","@id":"https:\/\/www.kappadata.pl\/#\/schema\/person\/d1b118980a9e892e9128e0dec942a300"},"headline":"Clever phishing techniques: QR codes with ASCII and Blob URIs that bypass security","datePublished":"2024-10-24T12:39:52+00:00","dateModified":"2024-10-24T12:39:58+00:00","mainEntityOfPage":{"@id":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/"},"wordCount":1123,"image":{"@id":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2024\/10\/Dolacz-do-nas-2024-4.png","keywords":["#ASCIIQR","#BlobURI","#cybersecurity","#NetworkSecurity","#Phishing","cyberbezpiecze\u0144stwo","Hacker attacks","IT security"],"articleSection":["Barracuda","News","publications"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/","url":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/","name":"New phishing techniques: ASCII QR codes and Blob URIs \u2013 how attackers bypass security measures","isPartOf":{"@id":"https:\/\/www.kappadata.pl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/#primaryimage"},"image":{"@id":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2024\/10\/Dolacz-do-nas-2024-4.png","datePublished":"2024-10-24T12:39:52+00:00","dateModified":"2024-10-24T12:39:58+00:00","author":{"@id":"https:\/\/www.kappadata.pl\/#\/schema\/person\/d1b118980a9e892e9128e0dec942a300"},"description":"A new generation of malicious QR codes A year ago, there was a significant increase in phishing attacks based on QR codes. Barracuda data shows that approximately 1 in 20 mailboxes were targeted by QR code attacks in the last quarter of 2023. These attacks typically used static, image-based QR codes. Attackers embedded malicious links in QR codes and encouraged users to scan them, leading them to fake websites designed to look like trusted services or applications","breadcrumb":{"@id":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/#primaryimage","url":"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2024\/10\/Dolacz-do-nas-2024-4.png","contentUrl":"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2024\/10\/Dolacz-do-nas-2024-4.png","width":1920,"height":1228},{"@type":"BreadcrumbList","@id":"https:\/\/www.kappadata.pl\/en\/clever-phishing-techniques-qr-codes-with-ascii-and-blob-uris-that-bypass-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Strona g\u0142\u00f3wna","item":"https:\/\/www.kappadata.pl\/en\/"},{"@type":"ListItem","position":2,"name":"publikacje","item":"https:\/\/www.kappadata.pl\/category\/publikacje\/"},{"@type":"ListItem","position":3,"name":"Clever phishing techniques: QR codes with ASCII and Blob URIs that bypass security"}]},{"@type":"WebSite","@id":"https:\/\/www.kappadata.pl\/#website","url":"https:\/\/www.kappadata.pl\/","name":"Kappa Data","description":"The Art of IT-infrastucture, security and IoT distribution","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.kappadata.pl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.kappadata.pl\/#\/schema\/person\/d1b118980a9e892e9128e0dec942a300","name":"Ola Serafin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g","caption":"Ola Serafin"},"sameAs":["http:\/\/kappadata.pl"]}]}},"_links":{"self":[{"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/posts\/13983","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/users\/26"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/comments?post=13983"}],"version-history":[{"count":2,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/posts\/13983\/revisions"}],"predecessor-version":[{"id":13985,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/posts\/13983\/revisions\/13985"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/media\/13953"}],"wp:attachment":[{"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/media?parent=13983"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/categories?post=13983"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/tags?post=13983"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}