QR Login Hijack

Attackers persuade victims to scan a Discord login QR code, granting access to the victim's account.

STATUSConfirmed

SEVERITYCritical

LIFECYCLEActive

LAST SEEN22 Aug 2026

FOLLOW THIS THREATGet investigation updates

Create a free viewer account to follow threats and receive updates when assessments change.

Create account

+ Report new informationAdd an unconfirmed report to this incident

ASSESSMENT

Threat overview

QR login abuse can bypass the victim's expectation of entering a password by convincing them to approve an attacker-controlled login session through a legitimate mobile app.

ACTIVITY

Reports · 14 days

TIMELINE

Threat timeline

22 Aug 2026 18:14Baseline registry record

Initial Threat Registry baseline intelligence record.

HAVE NEW INFORMATION?File a report against this incident

Add evidence, indicators or new activity directly to TR-2026-0006. It will enter analyst review as unconfirmed intelligence.

File a report →