Mandiant has identified a novel method to bypass browser isolation technology and achieve command-and-control operations through QR codes.

A phishing campaign was observed predominantly targeting a notable energy company in the US, employing QR codes to slip malicious emails into inboxes and bypass security.