Threat Actors Exploit Microsoft Sway to Host QR Code Phishing Campaigns
Briefly

Quishing, the practice of using QR codes to direct users to malicious content, is becoming increasingly prevalent, making it significantly harder to validate the safety of the content being accessed.
A recent surge in attacks using Microsoft Sway has been noted; in July 2024, Netskope Threat Labs reported a staggering 2000-fold increase in traffic to phishing sites through this tool.
The simplicity and accessibility of Microsoft Sway, being a free online app, attract cybercriminals who exploit its use in phishing attacks by embedding harmful QR codes.
Thomas Damonneville of StalkPhish emphasizes that quishing is a growing threat due to its ease of execution, complicating users' ability to verify legitimate content before engaging.
Read at TechRepublic
[
|
]