quishing

Quishing, a portmanteau of QR code and phishing, is a cyberattack method where criminals use QR codes to trick victims into visiting malicious websites. On WindowsForum.com, discussions highlight how Microsoft Sway, a presentation tool in Microsoft 365, has been exploited for quishing attacks. These attacks involve embedding QR codes in Sway presentations that redirect users to phishing pages, often targeting corporate credentials. The tag covers the mechanics of quishing, its use of legitimate cloud services like Sway, and mitigation strategies such as user awareness and security policies. Recurring themes include QR code abuse, cloud service misuse, and enterprise security risks.