We receive more and more sophisticated email attacks not containing phishing links but QR code to scan redirecting users to a malicious website. I assume attackers expect mobile devices to be less secured and protected than a workstation could be.
I guess it could be a great idea to have new mechanism "QR code security scan" part of the anti-phishing feature to fight against such modern attacks.
PS: Please don't reply with "the first thing is to educate end users" !
