Kaspersky Warns of Sharp Rise in QR Code Phishing Attacks in Late 2025

Cybersecurity firm Kaspersky has reported a significant increase in phishing attacks using malicious QR codes during the second half of 2025. According to its findings, detections surged from 46,969 cases in August to 249,723 in November, marking more than fivefold growth. Attackers are increasingly embedding QR codes in email bodies and PDF attachments to conceal malicious links and bypass traditional email security filters.

These QR codes often direct victims to fake login pages impersonating Microsoft accounts, corporate portals, or HR systems, enabling credential theft.

QR Code Phishing

Some campaigns also involve fraudulent invoices or purchase confirmations, combined with voice phishing tactics to further manipulate victims.

Kaspersky noted that QR code phishing is particularly effective because users often scan codes on mobile devices, which may lack robust security protections. The firm warned that such attacks can lead to account takeovers, data breaches, and financial losses. It urged organisations to deploy advanced email security solutions and practice safe scanning habits.

Business News