Squash quishing (QR code phishing) with Sublime

QR codes are quickly becoming a favorite delivery method for phishing attacks. Sublime's AI-powered phishing protection platform identifies malicious QR codes no matter where they're hiding and keep them out of inboxes.

The explosion and sophistication of AI-generated email attacks requires a solution that provides best-in-class efficacy, but also the ability to contextualize and respond to threats in real time. With Sublime, our team can prevent, detect, and respond to email-borne threats of today and the future.

QR code phishing
Brad Jones
CISO

QR code phishing (quishing) in a nutshell

QR code phishing

Attackers often use QR codes in phishing campaigns to bypass URL filters.

Since targets can't easily preview the destination before scanning, this method is highly effective at deceiving unsuspecting recipients.

A comprehensive phishing protection platform analyzes QR codes used to deliver malicious links, redirects to credential harvesting sites, automatic downloads of malware, social engineering attacks, and more.

What makes QR code phishing so effective

QR codes bypass standard link scanning methods and offer unique obfuscation methods.

Link analysis avoidance

By putting their malicious link in a QR code, attackers can evade analysis that relies on traditional URL inspection.

Unique obfuscation

QR codes come with their own obfuscation methods, like embedding them as HTML, image contrasting, color changes, and logo overlays.

Hidden payloads

Attackers will put QR codes in attachments or on a linked page, keeping it easy for humans to find, but difficult for traditional phishing protection tools.

Tools for catching QR code phishing

Sublime uses a layered combination of AI, machine learning, and org-specific detections to catch the phish.

01

Computer vision

Sublime uses computer vision to detect QR codes in an email body, linked pages, and attachments.

02

Link analysis

Sublime uses a browser emulation sandbox and machine learning to follow decoded QR code links through redirects to resolve the effective URL and collect a screenshot for further analysis.

03

Recursive file analysis

Sublime analyzes attachments with computer vision to detect QR codes and then resolve their destinations. This includes recursive analysis of archives, scanning all the files within regardless of depth.

Leading phishing protection service for QR code threats

See how Sublime's comprehensive phishing protection service can safeguard your organization from sophisticated quishing attacks.

Select all applicable use cases
Thank you!

Thank you for reaching out.  A team member will get back to you shortly.

Oops! Something went wrong while submitting the form.

Latest on QR code phishing

The latest news, research, and attack spotlights about QR code phishing and phishing protection service solutions.

November 3, 2025
Attack spotlight

ICS phishing: Stopping a surge of malicious calendar invites

Ahry Jeon
Product Manager
Brandon Murphy
Detection
October 23, 2025
Attack spotlight

Direct Send abuse on Microsoft 365: Just another failed authentication

Peter Djordjevic
Detection
October 16, 2025
Attack spotlight

Facebook credential phishing with job scams impersonating well-known companies

Bryan Campbell
Detection

Frequently asked questions

No items found.

Now is the time.

See how Sublime delivers autonomous protection by default, with control on demand.