Threat overview
QR login abuse can bypass the victim's expectation of entering a password by convincing them to approve an attacker-controlled login session through a legitimate mobile app.
CRITICAL SEVERITYCONFIRMED
TR-2026-0006QR Login Hijack
Attackers persuade victims to scan a Discord login QR code, granting access to the victim's account.
STATUSConfirmed
SEVERITYCritical
LIFECYCLEActive
LAST SEEN22 Aug 2026
Reports · 14 days
Threat timeline
22 Aug 2026 18:14Baseline registry record
Initial Threat Registry baseline intelligence record.
ACTIVITY
Hover for totals · click a day to inspect public reportsReports · 14 days
INCIDENT ACTIVITY
Reports
HAVE NEW INFORMATION?File a report against this incident
File a report →Add evidence, indicators or new activity directly to TR-2026-0006. It will enter analyst review as unconfirmed intelligence.