Forum Discussion

Copper Contributor

Sep 22, 2023

Recieving increasing number of phishing attempts mimicking Microsoft MFA QR Codes

Even though we are MS 365 defender customers for all our users (EMS + E3) we are receiving an increasing number of phishing attempts based on good looking MFA connection requests. Furthermore these ...

alerts

incident management

microsoft defender for endpoint

threat hunting

threat intelligence

Babsvald

Copper Contributor

Sep 29, 2023

RobYoung Just checking, did anyone get an effective way to block these out?

RobYoung

Iron Contributor

Sep 30, 2023

I think I am going to look at building a homegrown solution for scanning images for QR codes and building some rules around alerting on it (uncommon senders and from public email domains). Shouldnt be too difficult to do. Nice little side project.

tmwhere
Copper Contributor
Oct 09, 2023
RobYoung

If you do this please post to GitHub, looks like there is some demand here. 🙂

I was considering doing the same but am both asking our MSFT rep...will this be a feature enhancement, or shall we go shopping for 3rd party product here that will.