Attackers impersonated human resources departments in malicious emails purporting to be about salary updates containing PDF attachments with malicious QR codes.
Many of these "unknown" attacks are old wine in new bottles, so by focusing on familiar vectors like phishing, teams will find that these threats will decrease.
Hackread reports that organizations in the IT and technology industry were most spoofed in phishing scams between January 2020 and March 2024, followed by those in the banking and financial services sector.