Mimecast Announces Enhancements to QR Code Protections

LEXINGTON, Mass., Feb. 1, 2024 -- Mimecast Limited (Mimecast), an advanced email and collaboration security company, today announced that it has enhanced its Quick Response (QR) code protections to better serve current and future customers. Mimecast Email Security is now engineered to include deep scanning of URLs tied to QR codes, and upon inspection, malicious content will be blocked.  

In 2023, there was a massive uptick in QR code attacks, commonly referred to as ‘quishing’, and there are no signs the attack method will slow down in 2024. Threat actors deliver emails with QR codes that point to fake sites in an effort to steal credentials or perform other malicious activities. These attempts are difficult to detect as often people do not view QR codes as a danger, they have become commonplace for many legitimate uses such as restaurant menus, sign-up forms, and other useful online activities. 

According to Mimecast’s Global Threat Intelligence Report, overall attacks with malicious links increased by 22% in Q3 of 2023 compared to Q2. Mimecast threat intelligence, based on the processing of more than one billion emails per day on behalf of 42,000 global customers, found that inserting QR codes into the body of an email to deliver malicious links is a widely used tactic by cybercriminals and threat actors.

These new product enhancements directly address this issue, as Mimecast email security is designed to identify QR codes in the body of an email and extract the URL for deep scanning. Enhanced ‘quishing’ protection will help employee inboxes stay safe, further enabling customer organizations to Work Protected. 

“QR code attacks pose a serious and growing threat for organizations worldwide,” said Sean Brady, VP of Product Management. “At Mimecast, we will always innovate to meet our customers' needs, and we are tackling this growing attack vector head-on to keep organizations secure.”  

Deep scanning of QR code URLs is now live within Mimecast Email Security, and more enhancements to combat ‘quishing’ will follow. 

Mimecast: Work Protected™ 

Since 2003, Mimecast has stopped bad things from happening to good organizations by enabling them to Work Protected. We empower more than 40,000 customers to help mitigate risk and manage complexities across a threat landscape driven by malicious cyberattacks, human error, and technology fallibility. Our advanced solutions provide the proactive threat detection, brand protection, awareness training, and data retention capabilities that evolving workplaces need today. Mimecast solutions are designed to transform email and collaboration security into the eyes and ears of organizations worldwide. 

Mimecast and Work Protected are either registered trademarks or trademarks of Mimecast Services Limited in the United States and/or other countries. All rights reserved. All other third-party trademarks contained in this press release are the property of their respective owners.