Another way crooks can bypass email protection in phishing attacks is through the use of QR codes. Since these come in .JPG or similar image formats, they rarely get scanned for malice.

Cybercriminals have deployed a new "phish-free" Pal-involved email phishing attack that could fool even those on top of their cybersecurity game, warns Fortinet CISO.