The growing threat of QR-code phishing: one third of Czech companies have already faced an attack

ComSource, a cybersecurity and network infrastructure specialist, is warning of a significant rise in phishing attacks that exploit QR codes. According to ComSource’s latest analyses, one third of Czech companies have already encountered this type of fraud. Global data from OPSWAT confirms the trend: phishing campaigns are becoming increasingly sophisticated, and QR codes represent a new attack vector that is difficult to detect.

“QR codes are now found almost everywhere, from payment terminals, invoices and warehouse labels to advertising materials and tickets. Their widespread adoption also creates a new security risk that companies often underestimate. Attackers use QR codes to distribute phishing links that conventional security filters can easily miss,” warns Michal Štusák, co-owner of ComSource, one of the most experienced implementers of OPSWAT solutions in Czechia.

QR codes have become attractive to cybercriminals primarily because they allow malicious links to be concealed within an image, which conventional security filters often fail to detect. Attackers place QR codes containing fraudulent links in emails, PDF attachments and physical materials such as posters or leaflets. This lets them bypass traditional anti-malware and anti-spam mechanisms: a QR code does not look suspicious at first glance, and users cannot read its contents directly.

“Attackers exploit users’ trust and their familiarity with QR codes, which are now routinely used for activities such as two-factor authentication and payments. This sense of legitimacy and urgency often leads employees to scan a code without thinking, unknowingly giving an attacker access to their information or company systems,” explains Michal Štusák of ComSource. “Modern QR-code phishing campaigns are on the rise and target every sector, particularly energy, finance, healthcare and technology companies. It is therefore essential to combine technical controls with regular employee training and thorough checks of every channel through which QR codes can enter an organisation.”

Phishing is becoming more sophisticated as AI improves the quality of attacks

Phishing is not only a threat to individual users. It remains one of the most common and effective ways for attackers to gain access to corporate data. Artificial intelligence has recently made these attacks even more convincing. “Phishing now underpins most cyberattacks. AI enables attackers to prepare messages that are almost indistinguishable from legitimate business communications. Employees therefore often unknowingly hand over credentials or sensitive information,” explains Michal Štusák.

According to OPSWAT’s global data, phishing attacks account for up to 75% of all cyber incidents in critical infrastructure, and 80% of organisations in this sector have already fallen victim to them. The average cost of a phishing-related data breach reaches US$4.88 million, and remediation takes an average of 261 days.

Businesses and institutions need comprehensive solutions to protect critical infrastructure against phishing. These include URL filtering and blocking, scanning email content and attachments, Deep Content Disarm and Reconstruction (CDR), and real-time adaptive sandboxing. OPSWAT’s CDR technology, for example, analyses and reconstructs more than 180 file types, neutralising even highly sophisticated threats hidden in attachments.

“Companies should invest in innovative security solutions that enable early detection and elimination of threats across all communication channels. Regular employee training and awareness of new types of attacks, including QR-code phishing, are equally important,” concludes Michal Štusák of ComSource.