Broadcom reported:
A phishing campaign dubbed Scanception has been observed targeting organizations in key sectors such as healthcare, finance and others. The attack begins with phishing emails containing PDF attachments that appear legitimate but include embedded QR codes. When scanned, these QR codes redirect users to fake Microsoft 365 login pages, enabling attackers to harvest credentials.
A phishing campaign dubbed Scanception has been observed targeting organizations in key sectors such as healthcare, finance and others. The attack begins with phishing emails containing PDF attachments that appear legitimate but include embedded QR codes. When scanned, these QR codes redirect users to fake Microsoft 365 login pages, enabling attackers to harvest credentials.
Find the original article here.
Enroll in Training Sessions: Last Thursday of Every Month is Training on Frauds and New Scam Alerts and How to Combat
Enroll in Training Sessions: Last Thursday of Every Month is Training on Frauds and New Scam Alerts and How to Combat