New QR and Data Matrix scanning capability closes a major blind spot in enterprise data loss prevention amid rising QR-based phishing and data exfiltration.
eScan has announced a major enhancement to its eScan Enterprise Data Loss Prevention (DLP) platform with the introduction of automated QR code and Data Matrix barcode scanning. The new capability addresses a critical security gap that researchers and enterprises have identified as a growing vulnerability in modern data protection and insider threat prevention systems.
The update comes at a time when QR-code-based attacks, often referred to as “quishing”, are accelerating rapidly. In October 2025, Barracuda Networks researchers reported more than 500,000 phishing emails containing QR codes embedded in PDF attachments over just three months. Separately, a 2025 IEEE research paper found that most enterprise DLP solutions fail to detect sensitive data concealed within QR codes, calling it a “significant vulnerability” in existing data security frameworks.
“We were hearing the same thing repeatedly from our customers. Employees were finding creative ways to bypass DLP controls, and QR codes kept appearing in internal security audits. When we evaluated the market, we were surprised to see that most DLP solutions simply weren’t decoding barcodes at all,” said Govind Rammurthy, CEO of MicroWorld Technologies.
The enhanced eScan Enterprise DLP automatically decodes QR codes and Data Matrix barcodes embedded in images across email attachments, web uploads, and file transfers. Once decoded, the system applies the same deep content inspection and policy enforcement used for traditional documents.
The new feature enables enterprises to detect and prevent sensitive data leaks hidden inside visual codes, including:
- Credit card and financial data
- Aadhaar and PAN numbers
- Personally identifiable information (PII)
- Intellectual property and confidential business data
In addition, the platform can flag encrypted or obfuscated QR content, helping security teams identify deliberate attempts to bypass enterprise security controls.
Rising Threat of QR-Code-Based Attacks
According to Keepnet Labs, QR-code phishing attacks increased by 25% in 2025, yet only 36% of such attacks were successfully detected. The firm noted that nearly 29% of phishing emails in sectors such as energy, manufacturing, and retail now contain malicious QR codes.
While most QR-based attacks focus on credential theft, cybersecurity experts warn that the same techniques can be used for covert data exfiltration, especially when DLP systems are unable to decode visual data beyond basic OCR.
An IEEE study, presented at the 2025 Computing and Communication Workshop, demonstrated how corporate data could be encoded into QR codes and extracted without triggering traditional DLP alerts. Researchers found that most DLP platforms were not designed to inspect visual encodings, allowing sensitive data to pass undetected.
eScan’s QR and Data Matrix scanning feature is designed for enterprise-scale environments. It includes timeout protections to maintain performance and operates without additional hardware or noticeable system overhead. IT administrators can easily enable and manage barcode scanning through the eScan DLP management console, ensuring seamless deployment across organizations.
The solution supports QR codes, widely used in everyday business and commerce, as well as Data Matrix barcodes, commonly deployed in manufacturing, logistics, and supply chain operations.
25 Years of Enterprise Cybersecurity Innovation
MicroWorld Technologies, the parent company of eScan, has served enterprise customers for over 25 years across more than 90 countries. With a research and development team of over 300 security professionals, the company focuses on addressing real-world cybersecurity gaps that emerge as workplace technologies evolve.
With this industry-first QR code scanning capability, eScan Enterprise DLP strengthens its position as a next-generation data loss prevention and insider threat protection solution, helping organizations stay ahead of emerging attack techniques.
