Re: QR code phish in Word docs?

Ricky Boone <[email protected]> Fri, 5 Dec 2025 22:24:06 -0500

Newsgroups	gmane.mail.spam.spamassassin.general
Message-ID	<CAHAhptV9A3e8XXdM+39X6DLn7eFrrvq2_wybUkfMNF3MRM55DQ@mail.gmail.com>

I'm interested in this as well, but haven't seen anything from others
yet.  Something I'm trying to test is probably on the hacky side, but
to convert the Office file into a PDF, then run zbarimg against that.
I think that may be more successful than other thoughts I had, like
extracting the images and looping zbarimg against them, etc., but so
far just trying different things.

On Fri, Dec 5, 2025 at 3:43 PM Alex <[email protected]> wrote:
>
> Hi,
> Anyone have any tips on how to detect QR codes in Word docs?
> https://pastebin.com/ftJFt2bn
>
> zbarimg doesn't understand the format.
>
> This one includes a fake vcalendar invite along with an attached doc file with a QR code phish.
>
> Thanks,
> Alex
>