• Platform
    Spring '24 Software Release! Check out our new deep image-based detection, GWS capabilities, and more. Explore the new additions
  • Solutions
  • Learn
    New Report! Osterman Research releases their 2024 findings on Image-based/QR Code Attacks. Read the report
  • Partner
  • Pricing

New Study From IRONSCALES & Osterman Research Reveals Organizations High on Confidence, Low on Capabilities Against Image-Based Attacks

2024 March 5

While over 70% of organizations feel their current security stacks are effective against image-based and QR code phishing attacks, nearly 76% were still compromised in the last 12 months

ATLANTA, March 5, 2024IRONSCALES, the leading enterprise cloud email security platform protecting more than 13,000 global organizations, today shared critical findings from its latest research report conducted in partnership with Osterman Research, “Fortifying the Organization Against Image-Based and QR-Code Phishing Attacks.” The study surveyed 300 IT and security professionals across a variety of industries and geographies and unveiled a troubling paradox — while over 70% of respondents said they feel their current security stack is highly effective against image-based and QR code phishing, 76% reported being compromised by these types of attacks within the past 12 months — highlighting a stark disparity between the perceived and actual effectiveness of current defenses.

Some of the report’s key findings include:

  • Nearly 93% of IT and security professionals are aware of image-based phishing attacks targeting their organizations, and nearly 79% say the same about QR code attacks.
  • Nearly 76% of organizations were still compromised by image-based and QR code phishing attacks over the past 12 months.
  • While over 70% of IT and security professionals feel their current security stack is highly effective at detecting image-based and QR code phishing attacks, less than 6% were able to consistently detect and prevent them from reaching user inboxes.

The research reveals that organizations know of the rising threat posed by image-based and QR code phishing attacks, with over 90% of respondents acknowledging that such attacks target their organizations. However, despite this high level of awareness, an alarming 94% of these organizations have seen these emerging attacks bypass their email security stack. This discrepancy points to an urgent need for enhancing email security defenses and employee awareness training.

The Osterman research findings also spotlight the pressing need for advanced strategies to combat the increasing volume and complexity of image-based phishing attacks — a threat that extends far beyond the widely-reported technique of QR-code phishing (“quishing”). With 60% of surveyed professionals expecting the number, sophistication, and evasiveness of such attacks to worsen in the near future, this underscores a critical call to action for bolstering organizational defenses against this evolving digital threat.

What’s more, the research also reveals a significant portion of organizations face challenges related to the human element — with a staggering 76% of organizations conceding that their existing training programs are inadequate in equipping users to recognize and resist these threats.

Quishing Is Just the Beginning 

While QR code attacks have garnered a great deal of media attention as of late, this new research report makes it clear that image-based phishing represents a much broader, more complex challenge. Increasingly, threat actors are using novel techniques to create images that appear to be traditional text-based emails, which allows them to circumvent traditional security solutions.  

“In the face of the escalating frequency and complexity of image-based phishing attacks, traditional email security measures are proving to be increasingly insufficient. These sophisticated attacks exploit the nuanced vulnerabilities of human perception and our existing cybersecurity frameworks, making them particularly challenging to detect and prevent,” states Eyal Benishti, CEO of IRONSCALES. “Our latest research with Osterman highlights this urgent challenge, underscoring the necessity for a paradigm shift towards more adaptive and intelligent email security solutions that can keep pace with the innovative tactics of cybercriminals.”

The insights from the Osterman research report serve as a stark reminder of the evolving nature of cybersecurity threats and the imperative for organizations to assess their current email security stack. The findings also underscore the need for an integrated approach that includes advanced detection technologies, comprehensive user training, and a reevaluation of current security strategies to address the nuanced risks presented by image-based and QR code phishing attacks.

“As we navigate this increasingly complex threat landscape, IRONSCALES remains at the forefront of email security innovation, committed to equipping organizations with the tools and knowledge necessary to defend against the most sophisticated tactics in use today. Together, we can close the gap identified by this report, and build a more resilient digital ecosystem,” concludes Benishti.

Access the full report here: Fortifying the Organization Against Image-Based and QR-Code Phishing Attacks


IRONSCALES is the leading cloud email security platform for the enterprise and the industry’s only solution that uses AI and human insights (HI) to stop advanced phishing. Its award-winning, self-learning platform continuously detects and remediates attacks like BEC, ATO, and VIP impersonation that bypass traditional security solutions. Powerful, simple, and adaptive, IRONSCALES helps enterprises reduce risk, boost security team efficiency, and increase cybersecurity awareness. IRONSCALES is headquartered in Atlanta, Georgia, and is proud to support more than 13,000 global enterprises. Visit http://www.ironscales.com or @IRONSCALES to learn more.

Media Contact:
Doug De Orchis
Scratch Marketing + Media for IRONSCALES


Originally published at: https://www.businesswire.com/news/home/20240305210451/en/New-Study-From-IRONSCALES-Osterman-Research-Reveals-Organizations-High-on-Confidence-Low-on-Capabilities-Against-Image-Based-Attacks