2.0.3.0
minorVersion 2.0.3.0 decodes QR codes hidden in image attachments, in images embedded in the email, in PDFs and Office documents - the attack known as quishing.
What changed
- Decodes QR codes found in image attachments
- Decodes QR codes in images embedded directly in the email body
- Handles QR codes inside PDF and Office attachments
- Works across the supported mail providers, including Gmail, Outlook, Yahoo and Zoho
Quishing - QR code phishing - works because the whole message can be clean. A scam email increasingly carries no link at all. The link is a malicious QR code in the attachment, out of reach of the checks that read the message body.
This release reaches it. The extension decodes QR codes from image attachments, from images embedded directly in the message, and from inside PDF and Office attachments. It works across the supported mail providers. Gmail, Outlook, Yahoo and Zoho read attachment files directly, iCloud Mail covers Office attachments, and in Proton Mail - where document attachments are end-to-end encrypted and stay unreadable - it works from the image previews you open. What the code contains is then treated like any other link - checked before you ever scan it with your phone.