Cybersecurity: Links to Malware sites in QR

[Astronuc]

DON'T activate websites/links in QR codes, especially if from unsolicited parties.

If You Scanned That QR Code from the Super Bowl (Or Any QR Code), the FBI Has a Warning for You
QR codes are appearing everywhere--even in Super Bowl ads--but consumers and business owners should know that there are risks.

https://www.inc.com/jason-aten/if-y...ing-super-bowl-fbi-has-a-warning-for-you.html

QR codes are popping up everywhere as a way to direct customers to information without having to hand them a piece of paper or take a chance that they might mistype a URL.

There's a problem, however. Not every QR code is what it seems, and they've become a tool for bad actors. That's why the FBI is warning consumers to be aware any time they scan a QR code, and take steps to protect their information. While the FBI's warning isn't specifically in response to the Coinbase ad, there's an important lesson here--not just for consumers, but for business owners, as well.

The beauty of a QR code is that instead of asking someone to remember a website, you simply embed it in the code. When they scan the code, it takes them directly to whatever webpage you want.

As you might imagine, anytime a new technology makes it easier to get people to visit a website, or send money, someone is going to abuse it. That's exactly the warning that the FBI sent last month:

"Cybercriminals are taking advantage of this technology by directing QR code scans to malicious sites to steal victim data, embedding malware to gain access to the victim's device, and redirecting payment for cybercriminal use."

Once Malware gets on a system, it can look for or record personal information, e.g., bank accounts and login information. If one uses online banking or electronic funds transfer, malware may 'steal' information.

So, protect oneself.

Other do nots:

Do not respond to unsolicited emails or messages.

Do not click on links in messages or emails.

Do ask oneself if you would expect a friend or contact to send any such request or information? Always, check with the person you think might have contacted you. Again, do not respond to unsolicited emails, or emails saying one's account has been compromised and personal information is needed.

Unless one knows the other party well, and is expecting an email, be wary, as in cautious, or suspicious.

 

[Algr]

Yes, it is easy to print out a malicious CR code and stick it on top of a legitimate code in a public place. Someone would have to go around scanning EVERY public QR code to see if it had been switched.