QR code scanning in Messaging Gateway

Products

• Messaging Gateway

Issue/Introduction

Messaging Gateway scans text and attachments for malicious content but does not currently extract data embedded in QR codes for scanning.

Resolution

QR code scanning has been raised as a potential enhancement for the Messaging Gateway product and may be added in a later release.

As with all unknown data, QR codes should not be carelessly resolved unless the source of the QR code is known and trusted. Careless scanning of QR codes has been leveraged by attackers in a number of security and financial attacks so end users should be warned of the potential danger of scanning unknown or suspicious QR codes whether in email images or from any other source.