QR code use grows in popularity but poses hidden risks

guest · Sep 15, 2020

QR code use grows in popularity but poses hidden risks
September 15, 2020
https://betanews.com/2020/09/15/qr-code-popularity-risks/

The use of QR codes has risen during the pandemic as they offer a perfect solution to contactless interaction. But many employees are also using their mobile devices to scan QR codes for personal use, putting themselves and enterprise resources at risk.

A new study from security platform MobileIron shows that 84 percent of people have scanned a QR code before, with 32 percent having done so in the past week and 26 percent in the past month.
43 percent plan to use a QR code as a payment method in the near future and 40 percent of people would be willing to vote using a QR code received in the mail, if it was an option.
Click to expand...

However, QR codes are a tempting attack route for hackers too as the mobile user interface prompts users to take immediate actions, while limiting the amount of information available before, for example, visiting a website.

"Hackers are launching attacks across mobile threat vectors, including emails, text and SMS messages, instant messages, social media and other modes of communication," says Alex Mosher, global vice president of solutions at MobileIron. "I expect we'll soon see an onslaught of attacks via QR codes. A hacker could easily embed a malicious URL containing custom malware into a QR code, which could then exfiltrate data from a mobile device when scanned. [...]"

You can read more on the MobileIron site and there's an infographic summary of the findings below.
Click to expand...

MobileIron: MobileIron Research Reveals QR Codes Pose Significant Security Risks to Enterprises and End Users

guest · Oct 4, 2020

QR Codes: A Sneaky Security Threat
October 1, 2020
https://threatpost.com/qr-codes-sneaky-security-threat/159757/

They’re cheap to deploy and can be applied to almost anything — which is why every industry from retail to healthcare is now using them as a quick and easy way to link people to websites, promotional campaigns, store discounts, patient medical records, mobile payments and a whole lot more.
QR codes aren’t just cost-effective and simple to use. They’re also essential, especially during a pandemic where contactless transactions have become the norm.
What the Numbers Say (Hint: It’s Not Good)
My company, MobileIron, wanted to better understand current QR code trends, so in September we conducted a survey of more than 2,100 consumers across the U.S. and the U.K. It confirmed that QR codes are indeed more widely used today.

The results also highlighted some alarming trends: Mobile users don’t really understand the potential risks of QR codes, and nearly three-fourths (71 percent) of respondents can’t tell the difference between a legitimate and malicious QR code.
Click to expand...

So What, Exactly, Are the Risks of QR Codes?
Hacking an actual QR code would require some serious skills to change around the pixelated dots in the code’s matrix. Hackers have figured out a far easier method instead. This involves embedding malicious software in QR codes (which can be generated by free tools widely available on the internet).
To an average user, these codes all look the same, but a malicious QR code can direct a user to a fake website.
Click to expand...

guest · Oct 15, 2020

QR code scams are making a comeback
October 15, 2020
https://blog.malwarebytes.com/scams/2020/10/qr-code-scams-are-making-a-comeback/

Just when we thought the QR code was on its way out, the pandemic has led to a return of the scannable shortcut.
Scammers have dusted off their book of tricks that abuse QR codes, and we’re starting to see new scams. Or maybe just old scams in new places.
Some known QR code scams
The easiest QR code scam to pull off is clickjacking. Some people get paid to lure others into clicking on a certain link. What better way than to replace QR codes on a popular monument, for example, where people expect to find background information about the landmark by following the link in the QR code. Instead, the replaced QR code takes them to a sleazy site and the clickjacking operator gets paid his fee.

Phishing links can just as easily be disguised as QR codes. Phishers place QR codes where it makes sense for the user. So, for example, if someone is expecting to login to start a payment procedure or to get access to a certain service, the scammers may place a QR code there. We’ve also seen phishing mails equipped with fraudulent QR codes.
Click to expand...

guest · Jan 6, 2021

QR codes: Best approaches to using the technology safely and securely
How to ensure your next scan doesn’t lead to a scam
January 6, 2021
https://portswigger.net/daily-swig/...using-the-technology-safely-and-securely-nbsp

QR codes have a variety of uses, from storing bank information for payments to ordering at restaurants or joining a WiFi network.
But the easy-to-use codes don’t come without security risks – a concern highlighted by numerous incidents in 2020.

The Daily Swig takes a closer look at the potential security issues surrounding QR codes and the best approaches to using the technology safely. [...]
Click to expand...

What alternatives are there to QR codes?
While QR codes have boomed in popularity, other less well known technologies can provide much the same services – and sometimes more.

NFC is a radio-frequency technology that allows data to be transferred between an NFC tag and an NFC-enabled device.
The reason why QR codes are more popular is pretty clear, however: QR codes are free to generate via websites or apps, while NFC tags need to contain an encoded chip for them to be read by a device.
However, choosing QR over NFC does come at a security cost.
Click to expand...

Log in or Sign up

QR code use grows in popularity but poses hidden risks

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

QR code use grows in popularity but poses hidden risks

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches