QR Code Tricksters: New Phishing Tactics Unveiled by Barracuda Researchers
Barracuda Networks researchers have spotted quishing techniques with malicious QR codes. One involves splitting a QR code into separate images, while another nests a malicious code within a legitimate one. These cunning tactics make quishing a real head-scratcher, proving that even QR codes can have a split personality or a secret identity!

Hot Take:
Quishing: The new sushi for cybercriminals! Who knew QR codes could be so devilishly delicious? These digital tricksters are slicing and dicing QR codes like they’re prepping for a MasterChef finale, all to whet the appetites of phishing aficionados. With the emergence of sneaky split and nested QR codes, it seems even cybercriminals have taken a page from a magician’s playbook—now you see it, now you don’t!
Key Points:
- Gabagool and Tycoon PhaaS kits are using innovative QR code phishing techniques.
- QR code splitting involves embedding two separate images in emails to evade detection.
- QR code nesting incorporates a malicious QR within a legitimate one.
- Traditional email security systems struggle to detect these novel quishing tactics.
- Barracuda suggests multimodal AI-powered email protection against these threats.