Evading Modern Defenses When Phishing with Pixels
Explores QR code phishing tactics, visual obfuscation methods, and Outlook email rendering quirks used to evade modern email defenses.
Summary
Mechanics of QR Code Phishing
QR code phishing (quishing) embeds deceptive links within images to bypass traditional email gateway URL scanners and trick users into scanning codes with mobile devices.
Visual Obfuscation and Pixel Manipulation
Applying visual fragmentation, color palette shifts, and layered pixel manipulation techniques ensures QR codes remain decodable by phone cameras while blinding automated computer vision filters.
Exploiting Outlook Rendering Engine Quirks
Analyzing the HTML parsing and rendering behavior of the Microsoft Outlook desktop client reveals formatting techniques that disguise image payloads from security filters.
Hardening Email Defenses Against Quishing
Defenders must upgrade gateway inspection pipelines to render dynamic email HTML, extract embedded QR images, and enforce multi-factor authentication across mobile devices.
Related talks
Main Stage·36 min
Harrison Sand · Erlend Leiknes
Analyzes the evolution of enterprise phishing defense and demonstrates novel reverse-proxy adversary-in-the-middle tradecraft to bypass modern authentication.
Creator Stage·19 min
Katherine Rackliffe
Presents empirical results from a university research study evaluating user vulnerability and defensive safeguards against AI voice-cloned vishing attacks.
Main Stage·43 min
Keanu Nys
Demonstrates how red teams can abuse legitimate Microsoft login branding parameters and OAuth endpoints to host convincing, high-trust phishing infrastructure.