GoKawiil Original QR Code Scams Explained: How to Check a Code Before You Scan It
Quishing works because a QR code gives you nothing to judge before you commit. Here is what the scams look like in practice and the habits that defuse them.
Quishing works because a QR code gives you nothing to judge before you commit. Here is what the scams look like in practice and the habits that defuse them.
Security firm Sublime has reported a surge in phishing attacks delivered via calendar invitations (ICS files) rather than traditional email, warning that such invites can bypass spam filters even when the accompanying email is blocked. The scams typically mimic legitimate meeting invites or payment notices, directing victims to fake login pages or malware disguised as Microsoft, Google, or PayPal services. Sublime says ICS phishing incidents rose roughly 33,000% between May and September, with attacks doubling or tripling month over month.
Asus disclosed that a breach affected part of its eShop platform, exposing customer contact details and order records, though it says no payment or financial data was compromised. The company has not specified how many customers were affected, which regions were involved, or how long the breach lasted, and says it has contained the incident and is investigating.
A wave of phishing emails impersonating invitation platforms like Paperless Post and Evite has been spreading contacts' names to trick recipients into entering email or phone credentials to view fake event details. Journalist Eric Umansky was among early victims, waking to messages asking about a party he never planned, despite having two-factor authentication enabled on his account. The FTC issued a consumer alert in May after receiving a rise in reports of the scam.