Key facts
- Phishing emails are using QR codes to target employee performance reviews.
- The scam emails appear to be official HR notices regarding pay and benefits.
- Recipients are prompted to scan a QR code to access their appraisal files.
- The sender's email address ([email protected]) is unrelated to the claimed company.
- The emails use urgency tactics like deadlines and high importance markings.
- Legitimate HR communications typically use direct links or known company portals, not QR codes for sensitive data.
This phishing scam, termed 'quishing,' leverages QR codes to bypass traditional link verification, making it harder for users to detect malicious intent. By mimicking official HR communications and creating a sense of urgency, scammers aim to steal employee login credentials, which can then be used to access company systems or personal data.