{"id":2164,"date":"2026-08-21T16:11:31","date_gmt":"2026-08-21T21:11:31","guid":{"rendered":"https:\/\/wp.uthscsa.edu\/phishbowl\/?p=2164"},"modified":"2026-08-21T16:11:31","modified_gmt":"2026-08-21T21:11:31","slug":"watch-out-for-this-quishing-attempt-tied-to-2026-registration","status":"publish","type":"post","link":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/","title":{"rendered":"Watch Out for This ‘Quishing’ Attempt Tied to 2026 Registration"},"content":{"rendered":"

The following email, disguised as a business two-factor authentication notice, exhibits several characteristic indicators of a phishing attempt commonly referred to as “quishing” (QR code phishing):<\/p>\n

Red Flags:<\/strong>
\n1. Impersonal greeting:<\/strong> The message opens with a vague “Hello” rather than addressing the recipient by name. This is unusual for real account-specific security notice.
\n2. False sense of obligation:<\/strong> Language like “You’re hereby required to confirm” mimics official, legal sounding phrasing to pressure quick compliance without questioning the request.
\n3. Exploits a timely, believable event:<\/strong> By referencing “the new academic session,” the email ties itself to a real, expected occurrence, making the request feel routine and legitimate.
\n4. Use of a QR code instead of a text link:<\/strong> This is a major red flag. QR codes are harder to inspect before scanning, often evade email security filters designed for malicious URLs, and take you outside of the protection of your organization’s network once scanned.
\n5. Vague call to action:<\/strong> “Complete the exercise” is unusually generic phrasing for something as sensitive as two-factor authentication. Legitimate IT communications are typically specific and direct you to a known portal.
\n6. Borrows credibility from a trusted tool:<\/strong> By referencing Duo, the email leverages the recipient’s existing trust in that platform to lower their guard.<\/p>\n

What to do:<\/strong> If you receive this email, do not scan the QR code. Click the “Phish Alert Report” button in your email.<\/p>\n

\"\"<\/p>\n","protected":false},"excerpt":{"rendered":"

The following email, disguised as a business two-factor authentication notice, exhibits several characteristic indicators of a phishing attempt commonly referred to as “quishing” (QR code phishing): Red Flags: 1. Impersonal greeting: The message opens with a vague “Hello” rather than addressing the recipient by name. This is unusual for real account-specific security notice. 2. False […]<\/p>\n","protected":false},"author":961,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2164","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\nWatch Out for This 'Quishing' Attempt Tied to 2026 Registration - Phish Bowl<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Watch Out for This 'Quishing' Attempt Tied to 2026 Registration - Phish Bowl\" \/>\n<meta property=\"og:description\" content=\"The following email, disguised as a business two-factor authentication notice, exhibits several characteristic indicators of a phishing attempt commonly referred to as “quishing” (QR code phishing): Red Flags: 1. Impersonal greeting: The message opens with a vague “Hello” rather than addressing the recipient by name. This is unusual for real account-specific security notice. 2. False […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/\" \/>\n<meta property=\"og:site_name\" content=\"Phish Bowl\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-21T21:11:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/08\/20260821FinalRegistrationQuishing1-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1213\" \/>\n\t<meta property=\"og:image:height\" content=\"733\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"mennc\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"mennc\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/\"},\"author\":{\"name\":\"mennc\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/#\\\/schema\\\/person\\\/9f4e2ffef987522bcacaa796e523b99d\"},\"headline\":\"Watch Out for This ‘Quishing’ Attempt Tied to 2026 Registration\",\"datePublished\":\"2026-08-21T21:11:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/\"},\"wordCount\":238,\"image\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/wp-content\\\/uploads\\\/sites\\\/90\\\/2026\\\/08\\\/20260821FinalRegistrationQuishing1-1.png\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/\",\"url\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/\",\"name\":\"Watch Out for This 'Quishing' Attempt Tied to 2026 Registration - Phish Bowl\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/wp-content\\\/uploads\\\/sites\\\/90\\\/2026\\\/08\\\/20260821FinalRegistrationQuishing1-1.png\",\"datePublished\":\"2026-08-21T21:11:31+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/#\\\/schema\\\/person\\\/9f4e2ffef987522bcacaa796e523b99d\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/#primaryimage\",\"url\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/wp-content\\\/uploads\\\/sites\\\/90\\\/2026\\\/08\\\/20260821FinalRegistrationQuishing1-1.png\",\"contentUrl\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/wp-content\\\/uploads\\\/sites\\\/90\\\/2026\\\/08\\\/20260821FinalRegistrationQuishing1-1.png\",\"width\":1213,\"height\":733},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/uncategorized\\\/2164\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Watch Out for This ‘Quishing’ Attempt Tied to 2026 Registration\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/#website\",\"url\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/\",\"name\":\"Phish Bowl\",\"description\":\"Phish Bowl\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/#\\\/schema\\\/person\\\/9f4e2ffef987522bcacaa796e523b99d\",\"name\":\"mennc\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g\",\"caption\":\"mennc\"},\"url\":\"https:\\\/\\\/wp.uthscsa.edu\\\/phishbowl\\\/author\\\/mennc\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Watch Out for This 'Quishing' Attempt Tied to 2026 Registration - Phish Bowl","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/","og_locale":"en_US","og_type":"article","og_title":"Watch Out for This 'Quishing' Attempt Tied to 2026 Registration - Phish Bowl","og_description":"The following email, disguised as a business two-factor authentication notice, exhibits several characteristic indicators of a phishing attempt commonly referred to as “quishing” (QR code phishing): Red Flags: 1. Impersonal greeting: The message opens with a vague “Hello” rather than addressing the recipient by name. This is unusual for real account-specific security notice. 2. False […]","og_url":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/","og_site_name":"Phish Bowl","article_published_time":"2026-08-21T21:11:31+00:00","og_image":[{"width":1213,"height":733,"url":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/08\/20260821FinalRegistrationQuishing1-1.png","type":"image\/png"}],"author":"mennc","twitter_card":"summary_large_image","twitter_misc":{"Written by":"mennc","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/#article","isPartOf":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/"},"author":{"name":"mennc","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/#\/schema\/person\/9f4e2ffef987522bcacaa796e523b99d"},"headline":"Watch Out for This ‘Quishing’ Attempt Tied to 2026 Registration","datePublished":"2026-08-21T21:11:31+00:00","mainEntityOfPage":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/"},"wordCount":238,"image":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/#primaryimage"},"thumbnailUrl":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/08\/20260821FinalRegistrationQuishing1-1.png","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/","url":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/","name":"Watch Out for This 'Quishing' Attempt Tied to 2026 Registration - Phish Bowl","isPartOf":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/#primaryimage"},"image":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/#primaryimage"},"thumbnailUrl":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/08\/20260821FinalRegistrationQuishing1-1.png","datePublished":"2026-08-21T21:11:31+00:00","author":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/#\/schema\/person\/9f4e2ffef987522bcacaa796e523b99d"},"breadcrumb":{"@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/#primaryimage","url":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/08\/20260821FinalRegistrationQuishing1-1.png","contentUrl":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2026\/08\/20260821FinalRegistrationQuishing1-1.png","width":1213,"height":733},{"@type":"BreadcrumbList","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/uncategorized\/2164\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wp.uthscsa.edu\/phishbowl\/"},{"@type":"ListItem","position":2,"name":"Watch Out for This ‘Quishing’ Attempt Tied to 2026 Registration"}]},{"@type":"WebSite","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/#website","url":"https:\/\/wp.uthscsa.edu\/phishbowl\/","name":"Phish Bowl","description":"Phish Bowl","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wp.uthscsa.edu\/phishbowl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/wp.uthscsa.edu\/phishbowl\/#\/schema\/person\/9f4e2ffef987522bcacaa796e523b99d","name":"mennc","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2ac8703b198e0674fb128f0ef1df4c60383fc0d4321d5968f2875a0e28bdbc7e?s=96&d=mm&r=g","caption":"mennc"},"url":"https:\/\/wp.uthscsa.edu\/phishbowl\/author\/mennc\/"}]}},"_links":{"self":[{"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/posts\/2164","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/users\/961"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/comments?post=2164"}],"version-history":[{"count":0,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/posts\/2164\/revisions"}],"wp:attachment":[{"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/media?parent=2164"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/categories?post=2164"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-json\/wp\/v2\/tags?post=2164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}