How Cloudflare Cloud Email Security protects against the evolving threat of QR phishing

What this post added

This post details Cloudflare's strategy for detecting and mitigating QR phishing (quishing) attacks within its cloud email security solution. It explains the mechanics of quishing, why QR codes are favored by attackers (error correction, obfuscation difficulty for machines, use on personal devices), and Cloudflare's two-part protection strategy: 1) identification and scanning of QR codes using computer vision and heuristics, and 2) analysis of decoded QR codes through URL deconstruction, malicious content scanning, and ML-based link reputation. It also highlights real-world examples of quishing impersonating Microsoft Authenticator and DocuSign.