Squash quishing (QR code phishing) with Sublime

QR codes are quickly becoming a favorite delivery method for phishing attacks. Sublime's AI-powered phishing protection platform identifies malicious QR codes no matter where they're hiding and keep them out of inboxes.

See Sublime in action

QR code phishing (quishing) in a nutshell

Attackers often use QR codes in phishing campaigns to bypass URL filters.

Since targets can't easily preview the destination before scanning, this method is highly effective at deceiving unsuspecting recipients.

A comprehensive phishing protection platform analyzes QR codes used to deliver malicious links, redirects to credential harvesting sites, automatic downloads of malware, social engineering attacks, and more.

The explosion and sophistication of AI-generated email attacks requires a solution that provides best-in-class efficacy, but also the ability to contextualize and respond to threats in real time. With Sublime, our team can prevent, detect, and respond to email-borne threats of today and the future.
Brad Jones
CISO, Snowflake

What makes QR code phishing so effective

QR codes bypass standard link scanning methods and offer unique obfuscation methods.

Link analysis avoidance

By putting their malicious link in a QR code, attackers can evade analysis that relies on traditional URL inspection.

Unique obfuscation

QR codes come with their own obfuscation methods, like embedding them as HTML, image contrasting, color changes, and logo overlays.

Hidden payloads

Attackers will put QR codes in attachments or on a linked page, keeping it easy for humans to find, but difficult for traditional phishing protection tools.

Tools for catching QR code phishing

Sublime uses a layered combination of AI, machine learning, and org-specific detections to catch the phish.

Computer vision

Sublime uses computer vision to detect QR codes in an email body, linked pages, and attachments.

Link analysis

Sublime uses a browser emulation sandbox and machine learning to follow decoded QR code links through redirects to resolve the effective URL and collect a screenshot for further analysis.

Recursive file analysis

Sublime analyzes attachments with computer vision to detect QR codes and then resolve their destinations. This includes recursive analysis of archives, scanning all the files within regardless of depth.