W&L and other universities across the nation are being targeted with phishing scams that encourage users to scan fraudulent QR codes. According to BleepingComputer, the threat actors are using QR codes embedded in images to bypass email security tools that scan a message for known malicious links. This has opened up a new attack vector, allowing these phishing messages to reach your inbox.

The messages are being sent with a sense of urgency, a common phishing tactic. Some of the subject lines tracked thus far and an example screenshot can be found below.

• Microsoft Final Warning: Security Authentication for {university name}
• Salary Increase, Incentive Upgrade, Insurance Policy Review, and Benefit Package Update for {username}
• {username} Compensation Modification, Insurance Revision, and Benefit Package Update Tuesday-September-2023 xx:xx PM
• ACT FAST NOW!!!

Most QR code scanners on modern smartphones will ask you to verify the destination URL before launching the browser as a protective step. You should always check the URL before proceeding. More importantly, never scan a QR code from an unsolicited email.

When in doubt, you can always contact the ITS Helpdesk at X4357 or help@wlu.edu for assistance.