Security Tales: QR Antivirus
Vladimir Bezmaly | 11/18/2021
- Good morning, gentlemen!
- Johann, will you, as always, talk about something interesting?
— I hope so. And, alas, as usual, an unpleasant one. But first, I will ask you a question. You, of course, know what QR codes are? I think that you or your loved ones use them quite actively?
— I think I understand what you're getting at, Johann. Recently, the empire has seen an increase in cases of fraud using QR codes. The scheme works very simply: the attackers trick the victim into scanning a QR code printed on paper, after which malware is installed on their phone.
— True. QR codes can be found anywhere—on utility poles, benches, elevators, etc. In addition, scammers print fake advertising leaflets on behalf of electronics stores and drop them in mailboxes. The leaflets invite you to participate in a promotion, and to register, the participant is asked to scan a QR code. After the victim scans it with their phone camera, funds are debited from their account.
— Exactly, Johann. Not long ago, a bar owner contacted the capital's police. His bar had thus lost a day's revenue over the weekend — about 30 imperials. payment method using a QR code. A indonesia mobile database could scan the code and thereby pay for an order, which was what the scammers took advantage of. They pasted their own QR code on top of the real QR code on the menu, as a result of which money from the visitors' accounts was sent not to the bar, but to the scammers.
— I must warn you that the following scheme has become widespread recently. In order for the victim not to suspect anything, the malware may not be activated immediately after the device is infected, but, for example, two weeks later. This is often used by scammers who deceive tourists. They offer to scan a QR code to get discounts, and for some time nothing suspicious happens. Only after returning home from vacation, the tourist discovers that the money is missing. In addition to writing off funds from accounts, the malware can provide attackers with access to all the contents of the infected device, as well as the camera.
- But what do you recommend doing? How to protect ourselves?