# Global rise in QR-code phishing attacks > Live situation record from CLSTR: https://clstr.news/situations/global-rise-in-qrcode-phishing-attacks > Updated: 2026-08-27T06:50:36.000Z. Sources: 14. Developments: 7. In late July 2026, law-enforcement agencies across Europe, North America and Asia warned that the worldwide surge in QR-code phishing—often called “quishing”—had expanded beyond the parking-meter stickers first reported in Zug, Switzerland. Criminals are now swapping legitimate QR stickers on a range of public fixtures, including restaurant tables, ticket machines and information boards, directing users to concealed fraudulent sites that harvest banking credentials and install malware such as Hook v3 and RedHook. By mid-August, security experts warned that these attacks are increasingly “MFA-resilient,” capable of bypassing multi-factor authentication by stealing tokens, initiating malicious downloads, or manipulating Wi-Fi connections. This tactic aims to lure victims from protected desktop environments to private mobile devices where security measures are often less effective. The FBI has specifically identified the North Korean hacker group Kimsuky (APT43) for using QR codes in spearphishing attacks against organizations in the United States, often employing device fingerprinting to steal credentials. Regional vulnerabilities continue to emerge. In Argentina, the rapid adoption of QR payments has created risks, with the BA-CSIRT noting primary danger occurs when users enter sensitive data after scanning. In Spain, the Cybersecurity Agency of Catalonia identified a scam involving unsolicited packages containing QR codes that promise gifts. Additionally, reports from Wales highlight the exploitation of parking meters, where scanning fraudulent codes has led to unauthorized bank withdrawals. Data from Report Fraud indicates a 700% increase in QR code-related scam reports over the last four years. In late August, new tactics were identified in Lithuania. According to data from Tele2, cybersecurity firm Interneto apsauga blocked over 107 million threats in July. Scammers in the region are reportedly presenting QR codes on computer screens under the guise of “robot verification” or video playback requirements. Scanning these codes redirects mobile users to unsafe websites. ## Claims - 11% of analyzed phishing emails contained malicious QR codes during the first half of 2026. (single source) - The FBI is monitoring the North Korean hacker group Kimsuky (APT43) for its use of QR codes in spearphishing. (single source) - Quishing attacks can be MFA-resilient, meaning they are capable of bypassing common multi-factor authentication. (single source) ## Timeline ### 2026-08-27: Cybersecurity threats in Lithuania rise through deceptive QR codes and fake broadcasts Cybercriminals are using deceptive tactics like fake QR codes and fraudulent free sports broadcasts to trick users, with over 107 million threats blocked by Interneto apsauga in July. 2 sources. https://clstr.news/cluster/cybersecurity-threats-in-lithuania-rise-through-deceptive-qr-codes-and-fake-broadcasts ### 2026-08-23: QR code scams rise as fraudulent parking apps target users QR code-related scams have increased by 700% in four years, with criminals using fraudulent parking apps to steal money and data from unsuspecting users. 2 sources. https://clstr.news/cluster/qr-code-scams-rise-as-fraudulent-parking-apps-target-users ### 2026-08-16: Cybersecurity experts warn of rising QR code phishing attacks Cybersecurity experts warn of rising 'quishing' attacks, where 11% of phishing emails use malicious QR codes to bypass MFA and target mobile devices, including threats from the Kimsuky hacker group. 2 sources. https://clstr.news/cluster/cybersecurity-experts-warn-of-rising-qr-code-phishing-attacks ### 2026-08-12: Cybersecurity agencies warn of rising QR code phishing scams Authorities in Argentina and Spain are warning against ‘quishing’ scams, where fraudulent QR codes are used to steal banking data and personal information via fake websites or unsolicited packages. 2 sources. https://clstr.news/cluster/cybersecurity-agencies-warn-of-rising-qr-code-phishing-scams ### 2026-08-01: Travel QR Code Scam Targets Tourists Worldwide The “Quishing” travel scam uses fake QR codes at restaurants, parking meters and transit hubs to steal tourists’ data. Pause, check the code and URL, then pay safely. 2 sources. https://clstr.news/cluster/travelers-warned-of-rising-qr-code-phishing-scams ### 2026-07-28: Global rise in QR code phishing scams threatens consumers Law enforcement across Europe, North America and Asia warn that QR code phishing (“quishing”) is surging, with criminals swapping legitimate QR stickers for malicious ones on parking meters, menus and public QR 2 sources. https://clstr.news/cluster/global-rise-in-qr-code-phishing-scams-threatens-consumers ### 2026-07-18: Zug QR-code scams spotlight 146% global rise in quishing attacks In Zug, fake QR stickers on parking meters led to fraudulent sites as global QR‑code phishing rose 146%, while banking trojans and a deep‑fake scam in Mumbai stole €11.5 million. 2 sources. https://clstr.news/cluster/zug-qr-code-scams-spotlight-146-global-rise-in-quishing-attacks --- Cite as: Global rise in QR-code phishing attacks. CLSTR, https://clstr.news/situations/global-rise-in-qrcode-phishing-attacks