Fake QR Codes Are Tricking People Into Giving Away Passwords: How to Stay Safe
Scammers put fake QR codes on restaurant menus, parking meters, and flyers to steal your information when you scan them. Here is how to spot the fakes.
Source
ZDNet Security
Original headline: Is that QR code a trap? How to spot quishing scams before it's too late
Plain-English summary by GetCyberRight. Read the full report at the source above.
QR codes are those square barcodes you scan with your phone camera to open websites, menus, or payment pages. Scammers have started creating fake QR codes and placing them over real ones or putting them in places where you would expect to see them. When you scan these fake codes, they take you to websites designed to steal your passwords, credit card numbers, or other personal information.
This scam is called "quishing" (QR code phishing). Anyone who scans QR codes is at risk. You might find fake codes stuck over real ones on restaurant table tents, parking meters, flyers on bulletin boards, or even in emails. If you scan one of these fake codes and enter information on the website it opens, scammers can capture whatever you type.
Your entire family could be affected, especially if kids scan codes without checking where they lead. Before scanning any QR code, take these steps. First, look closely at the code itself. Is it a sticker that could have been placed over another code?
Stay one step ahead of scammers
Weekly cybersecurity briefings for families. No spam, just the threats that matter and what to do about them.
Does it look tampered with or poorly printed? Second, after scanning, look at the web address that appears before tapping it. Does it match the business or service you expect? Third, never enter passwords, credit card numbers, or personal information on a site you reached through a QR code unless you are absolutely certain it is legitimate.
Fourth, for restaurant menus or parking, consider asking staff for alternatives rather than scanning codes in public places. Get in the habit of treating QR codes like links in emails. Just because a code exists does not mean it is safe. Teach your children to ask an adult before scanning any QR code.
For payments, it is often safer to use a business's official app or website that you access by typing the address yourself. When in doubt, skip the QR code and find another way to get the information you need. Your caution takes just a few extra seconds but can prevent hours of cleanup if your information gets stolen.
Curated from trusted cybersecurity sources by GetCyberRight
Source: ZDNet SecurityStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles
US Sanctions VPN Service That Helped Criminals Attack Hospitals and Schools
The US government sanctioned a VPN provider for helping ransomware gangs hide attacks on critical infrastructure. Here's what families need to know.
4 min readCriminal VPN Service Sanctioned for Helping Ransomware Attacks
The US Treasury sanctioned a VPN provider used by ransomware gangs to attack hospitals, schools, and cities while hiding their identities.
4 min read
Japan's Largest Taxi Operator Shuts Down After Cyberattack
Nihon Kotsu forced offline to contain breach, affecting thousands. What small businesses can learn from this infrastructure attack.
3 min readVoice Scammers Are Now Stealing Your Work App Access. Here's What to Do
A major hacking group is calling employees and tricking them into handing over access to work accounts. Microsoft says it's already targeting companies worldwide.
4 min read