A new malicious npm package, "fezbox," hides a credential-stealing payload within a QR code, which it uses to exfiltrate web cookies and credentials.

One square of pixels — could it start a catastrophe? (Spoiler: probably not — but parts are real.)

The NPM package fezbox uses an inverted URL and steganography to hide executable JavaScript inside a QR code image to steal credentials. Update ASAP.Export to Sheets

When you’re on SOC duty, alerts don’t politely “ding” like Slack pings — they crash into your SIEM like Reiner shoulder-charging through…

CISA issued an urgent alert: Commercial spyware is actively exploiting zero-click flaws and malicious QR codes to hijack messaging apps (Signal, WhatsApp) for espionage against government and civil society targets.

Add as a preferredsource on Google A deceptive new cyberattack campaign is turning one of WhatsApp’s most convenient

Researchers at Gen have reported a new WhatsApp account-takeover technique dubbed GhostPairing. The attack appears mundane and arouses

Kimsuky is deploying a new DOCSWAP RAT via QR codes and smishing. The DPRK-linked malware turns phones into surveillance tools for data theft.

A sophisticated new phishing campaign is targeting employees where they are most vulnerable—their paychecks—by leveraging QR codes to bypass corporate security defenses. A new analysis by CYFIRMA …

Cyber adversaries have conceived an ingenious method to circumvent the security protocols utilized by email services to intercept malicious QR codes. Rather than employing conventional image files…