The popularity of QR codes are on the rise. You may see them at a restaurant to download menu, at the parking meter, real estate listing, even on Superbowl ad for Coinbase. But, the popularity of them are also expanding to cybercriminals.
The use of these codes makes it easier for the average consumer to be taken to a particular web page or spot within an app, but it’s also the playground for cybercriminals/scammers. Scammers are creating their own malicious QR codes designed to dupe unwitting consumers into handing over their banking or personal information.
QR codes, the abbreviation stands for "quick response", invented and started in Japan in the 1990’s. Originally, used by the automotive industry to manage production but have spread everywhere into everyday life.
Now they're being exploited by cybercriminals, adding to the on going email phishing scams. Scanning the fake code won't do anything to your phone, such as download malware in the background. But it will take you to fake websites designed to get personal information directly or financial information.
Although, they these scams represent a small amount of the overall phishing schemes, they will continue to be on a rise as the use of QR codes are being used more regularly.
Take time to reviews our partners, KnowBe4 blogs from their security awareness advocate, Javvaad Malik, that provides an overview of the tactics used in QR code scams (including a few benign examples).
CorpInfoTech (Corporate Information Technologies) provides small to mid-market organizations with expert I.T. services including compliance assessment, cybersecurity penetration tests, and comprehensive business continuity planning services. CorpInfoTech can help organizations, quantify, create, refine, and mitigate the risks presented by business threatening disasters in whatever form they may be disguised.