Description
This article explains how to detect QR-coded URL categories in the body of an email.
Scope
FortiMail v7.2, v7.4, v7.6, v7.8.
Solution
QR codes can be scanned to direct users to websites associated with the codes.
It is possible to enable QR code URL scanning, which queries the websites associated with the QR codes on FortiGuard and takes action depending on the URL category.
Run the following configuration to enable this feature:
config antispam settings
set qr-code-url-scan-option attachment-image inline-image
set qr-code-url-scan-status enable
end
Note:
Starting from v7.4.0, a new feature 'QR Code URL in Attachment' has added a QR code URL scan in the email attachment. Only inline QR codes were scanned before.
Sample Log:
The cross-search log below indicates that the URL was extracted from the QR code and identified as category: phishing.
