QR codes have become almost commonplace in our culture today. You want easy access to the steakhouse menu? Scan the QR code. Order tickets to the show? Scan the QR code. Download the virus? Scan the QR code. Wait, what?
If you have not guessed, QR codes are a dime a dozen, and people love to scan them. That is why they are so effective in delivering malware or leading you to fake login sites. Also, just because the scan did not “do” anything does not mean it did not “do” anything. It can pull device information in the background, including location, operating system, IP address, and browser. This helps attackers build a profile on you. Even marketing companies can use this information!
How you can stay ahead of the game:
- Be careful with unknown QR codes. If you did not expect it, don’t scan it. Codes sent via emails, text messages, or other apps are common vectors for the attacks. The hackers rely on your curiosity to scan that code.
- Verify Verify Verify… Always confirm the source of the QR code. If it claims to be from an organization that you work with or a coworker that normally does not send you such things, give them a quick call or reach out is some way. It could save you a major headache.
- Don’t log in anywhere the scan brings you after you scan that QR code. The phishing that is done tries to get your credentials. If it is something that you are “sure” you need to log into, close the tab or program and manually open a new window and log in there.
If you have or think you have fallen victim to this type of scam, please reach out to your local FBI office. Also, we can help facilitate any recovery process that is needed.
As always, please feel free to reach out to us if you have any thoughts on this.
Stay Safe Out There!