Sophos, a global leader of innovative security solutions for defeating cyberattacks, has released the results of Sophos X-Ops research on a new type of threat: quishing.

This new attack vector involves the use of fraudulent QR codes, emailed by threat actors, to bypass the phishing security measures put in place by companies.

This fraudulent QR code, embedded in a PDF document attached to an email, takes the form of a message about payroll, employee benefits, or other forms of official paperwork a business might send to an employee. Because QR codes are not readable by computers, the employee must scan the QR code using their mobile phone.

The QR code links to a phishing page, which the employee may not recognize as malicious since phones usually are less protected than a computer. The goal of the attackers is to capture employees’ passwords and their multi-factor authentication (MFA) tokens in order to access a company’s system by bypassing the security measures in place.

“We spent a considerable amount of time sifting through all the spam samples we had to find examples of quishing,” comments Andrew Brandt, principal researcher at Sophos X-Ops. “Our research has revealed that attacks that exploit this specific threat vector are intensifying, both in terms of volume and sophistication, especially when it comes to the appearance of the PDF document. »

In addition to social engineering tactics, the quality of emails, attachments and QR code graphics, these attacks seem to be growing in terms of organization as well. Indeed, some malicious actors now offer as-a-service tools to run phishing campaigns using fraudulent QR codes. In addition to features such as CAPTCHA bypasses or the generation of IP address proxies to bypass automated threat detection, these criminal organizations provide a sophisticated phishing platform that can capture the credentials or MFA tokens of targeted individuals.

To encourage organizations to better protect systems against this type of attack, Sophos X-Ops shares a list of recommendations:

· Be vigilant about internal emails about HR topics, salaries or company benefits: Sophos X-Ops’ research has found that social engineering tricks exploit these themes to trick employees into scanning fraudulent QR codes from their mobile devices.

· Install Sophos Intercept X for Mobile : Available on Android, iOS and Chrome OS, this solution includes a secure QR code scanner that helps identify known phishing websites and alert if the URL is considered malicious.

· Monitor risky sign-ins: Using identity management tools, organizations can detect unusual sign-in activity.

· Enable Conditional Access: This feature helps enforce access controls based on the user’s location, device status and risk.

· Enable effective access monitoring thanks to sophisticated logs: this type of advanced monitoring allows you to better visualize all access to the system and detect this type of threat in time.

· Implement advanced email filtering: Sophos’ QR code phishing protection solution detects fraudulent QR codes included directly in emails and plans to expand its solution to QR codes in attachments as early as the first quarter of 2025.

· Leverage on-demand email retrieval: Sophos Central Email customers who use Microsoft 365 have this feature to eliminate spam or phishing emails from corporate emails.

· Encourage employees to be vigilant and report incidents: Prompt reporting of anomalies to the incident response team is essential to protect company systems from phishing.

· Revoke suspicious user sessions: It is imperative to have a plan in place to revoke user access that shows signs of compromise.

Despite the continuous development of new attack vectors, organizations can protect themselves from compromised systems by equipping themselves with the right tools, fostering a culture and work environment, and surrounding themselves with security vendors that, like Sophos.

Stakeholders in the digital rights and inclusion space now have an opportunity to advocate for the same and shape policy development in the Global South.

This follows today’s call for session proposals by Paradigm Initiative (PIN) for the 2025 Digital Rights and Inclusion Forum (DRIF25) scheduled to be held in Lusaka, Zambia from April 29th to May 1st, 2025.

The session proposals should demonstrate tangible outcomes and be innovative.

At the same time, Paradigm Initiative will this time round provide delegates with an opportunity to support Digital Rights and Inclusion efforts by purchasing tickets for the event, which will be held under the theme, “Promoting Digital Ubuntu in Approaches to Technology.”

This new development resonates with the theme that calls for inclusive and collaborative approaches to advancing digital rights and inclusion across the Global South.

It also does not deny delegates the opportunity to register and attend the event for free. More details will be announced at a later date.

Sessions at DRIF25 will include panel sessions, lightning talks, pre-event workshops, exhibitions, launches, world cafe, workshops, tech demos and fireside chats.

They will be covered under the following thematic areas; Artificial Intelligence and Emerging Technologies, Trust and Accountability, Data Protection, Privacy and Cybersecurity, Digital Inclusion and Marginalised Groups, Digital Security, Human Rights and Freedoms.

The proposals should align with the event theme and demonstrate clear outcomes, creativity, and potential for impact.

Thobekile Matimbe, PIN’s Senior Manager, Partnerships and Engagements said in an era where technology profoundly shapes societies, DRIF25 is a call to action for advocates to champion and drive meaningful change in the Global South.

“This platform is not just about conversations but also pioneering solutions that reflect collective accountability and solidarity.

“By contributing to this event, participants lay building blocks for a more inclusive and responsive digital landscape.

“The journey to shape digital rights and foster unity in technological approaches has continued to gain momentum over the years,” she added.

In 2024, the organisation received 245 session proposals and hosted over 80 sessions, an increase from 2023’s 70 sessions. DRIF24 incorporated a blend of panel sessions, launches, tech demos, pre-event workshops, lightning talks and exhibitions under diverse tracks including digital rights, digital inclusion and digital security.

Key among them was the exclusive premiere of PIN’s fourth short film Undersight, and the launch of the organisation’s annual digital rights and inclusion report Londa, and digital toolkits, Ayeta, and Ripoti. The 2023 Londa report presented findings covering 26 African countries.

Every year, Paradigm Initiative (PIN), a leading pan-African non profit organisation works in collaboration with partners to bring together representatives from government, non-governmental organisations, academia, media, funding partners, the United Nations, the technical community, and the private sector within the digital ecosystem.

The event fosters collaboration across sectors, encouraging input from relevant stakeholders.

PIN is partnering with Bloggers of Zambia, Common Cause Zambia, Internews Network Zambia, Zambian Cybersecurity Initiative Foundation (ZCSI), Internet Society Zambia, Zambia Information and Communication Technology Authority (ZICTA) and the Ministry of Technology and Science to host the DRIF25 event.

Since 2013, PIN and partners have successively held 11 DRIF editions, with 2025 being the 12th Edition. In 2024 DRIF was held in Accra, Ghana, attracting 1,044 registered attendees and delegates from 61 countries across the world. In 2023, DRIF which was held in Nairobi, Kenya was attended by 601 participants drawn from 54 countries across the world.

DRIF has grown significantly over the years, evolving into a premier platform for dialogue on digital policy, rights, and inclusion, accommodating views and opinions from civil society, technology companies, government, academia, and other stakeholders.

In a significant milestone for women in tech, TD Africa officially launched the TecHERdemy program yesterday, 13th November 2024, an initiative aimed at equipping 400 young Nigerian women with essential digital skills to succeed in today’s technology-driven world.

Participants and the Executives of TD Africa at TecHERdemy program held recently

The launch event, held in the Yudala Height Building of the company and co-sponsored by global brands like Huawei, Microsoft and Cisco, brought together participants who had completed a series of online assessments to secure a spot in this highly anticipated program.

Mrs. Chioma Ekeh, ceo of TD Africa, expressed her enthusiasm for the TecHERdemy program, emphasizing how closely it aligns with TD Africa’s mission of “Empowering You.”

She reiterated that the training would offer the participants invaluable skills and insights to help them thrive in the technology sector.

“TecHERdemy is not just a training program; it’s a launchpad to a brighter future for each of you.

“I encourage you to seize this opportunity, as it is a chance to bring positive change, not only in your lives but also to empower others in your communities and beyond,” Mrs Ekeh remarked.

As the co-sponsor of the program, Huawei was represented by Gary Li, Channel Director, who expressed Huawei’s commitment to partnering with TD Africa to make this initiative a success.

“Huawei is proud to be part of TecHERdemy, a program that mirrors our commitment to innovation and equality in the tech sector.

“We are dedicated to supporting each participant’s journey, ensuring they gain industry-relevant skills to meet global standards,” said Mr. Li.

Participants were introduced to the core courses they will undertake over the next six months, which include Cybersecurity, Data Science, Artificial Intelligence, and Software Development.

Each course will be delivered by industry experts to ensure hands-on, practical learning that meets international standards. Successful graduates of TecHERdemy will receive certificates and job placement validating their new skills and expanding their career prospects in the fast-growing tech sector.

The launch of TecHERdemy underscores TD Africa’s commitment to bridging the gender gap in the tech industry by fostering a more inclusive and equitable landscape for all.

By investing in the next generation of female tech leaders, TD Africa and its partners are contributing to a more empowered and digitally savvy Nigeria, paving the way for a brighter future for women in technology.