publishing date icon
September 15, 2023
read time icon
5 min. read

Threat feed week 37: SharePoint, DocuSign, Hoxhunt impersonations, PDF, and more QR codes

Post hero image

Table of contents

share this post

SharePoint impersonation QR code

Hox rating: ★★✩✩

Threat type: Bulk phishing

Payload: Malicious QR code

Region: Global

Analyst: Minna Herlevi

Date: 11.09.2023

This SharePoint impersonation pretends to lead to the recipient’s annual benefit plan.

SharePoint impersonation

The email subject mentions a salary increase and benefits package enhancement, both ploys to get the recipient to click the link in  excitement.

DocuSign impersonation QR code

Hox rating: ★✩✩✩

Threat type: Bulk phishing

Payload: Malicious QR code

Region: Global

Analyst: Minna Herlevi

Date: 15.09.2023

This phishing email is impersonating DocuSign. It includes a malicious QR code that claims to lead to the document.

DocuSign impersonation QR code

The email subject mentions a mandatory policy and compliance, which create urgency.

Hoxhunt impersonation QR code

Hox rating: ★★✩✩

Threat type: Bulk phishing

Payload: Malicious QR code

Region: Global

Analyst: Minna Herlevi

Date: 15.09.2023

This phishing email is pretending to come from Hoxhunt's HR. It claims that your annual retirement fund statement is ready and includes a QR code that supposedly leads to said statement.

Hoxhunt impersonation QR code

The message also includes instructions on how to scan QR codes.

New PDF file received

Hox rating: ★✩✩✩

Threat type: Bulk phishing

Payload: Malicious link

Region: Global

Analyst: Minna Herlevi

Date: 15.09.2023

This phishing email is pretending to be an electronic file transfer receipt.

New PDF file received

It attempts to get the recipient to click the link using curiosity.

Keep up with the threat feed

Don't miss the next threat feed, and subscribe to our newsletter for the latest feed and cybersecurity content. Stay informed and stay safe!

Subscribe to Threat Feed

Subscribe to Hoxhunt's Threat Feed to get the latest phishing threats delivered to your inbox, every Friday.

Form CTA

Hoxhunt needs the contact information you provide to us to contact you about our products and services. You may unsubscribe from these communications at anytime. For information on how to unsubscribe, as well as our privacy practices and commitment to protecting your privacy, check out our Privacy Policy.