2024-07-07 19:47:09
QR codes are everywhere. If you walk down the street, you are very likely to come across one that, when scanned by your smartphone, will open a web page. Although it may seem like a harmless action, some cybercriminals are taking advantage of them to scam people. This type of scam already has thousands of victims and has been dubbed QR code. Quishing. What does it mean?
What is Quishing?
You’ve probably heard of phishing, a scam method that involves sending (via SMS, email, WhatsApp, etc.) a link that will take the victim to a cloned portal. Typically, the fake websites belong to well-known banks, with the aim of tricking people into entering their card number, password, and other personal information.
Once the criminal has all of his victim’s information, he will log into his victim’s bank account and start making transfers. If he has enough time, he can even leave him without savings. Quishing It is somewhat similar to phishing, but instead of entering a cloned website through a link, you are entering through a falsified QR code.
How does Quishing work?
Imagine you’re browsing the internet and you come across an advertisement (with a QR code) that claims you can get an incredible discount on your Amazon purchases. Many people interested in the offer will not hesitate to scan the code with their cell phone, without imagining that the page they will go to does not belong to the well-known store, but is a cloned website.
In order for you to be able to claim the supposed promotion, the fake page will ask you for your full name, ID, email, credit or debit card number, among other private data. It is worth noting that you should not only be wary of QR codes that you find on the Internet, it is also possible to find them in print (posters, flyers, among other similar items).
According to Xataka, a website specialized in technology, in the United States, several cases of Quishing involving the company founded by Jeff Bezos. As you can see in the image, a supposed Amazon voucher tells us that we can get a gift card, just by entering the QR code and completing certain information.
How to avoid falling for this scam?
According to the publication, to avoid being a victim of Quishing You should be wary of QR codes that you receive without asking for them or that come from unreliable sources (posters, websites, flyers, etc.). If the supposed promotion includes something too good to be true, it is also best not to enter, as the page could be more dangerous than expected.
Instead of taking you to a fake portal, the QR code can take you to a website hosting a malicious app that you could accidentally download onto your smartphone. Once your phone is infected with malware, the cybercriminal could take a number of actions, such as contacting your contacts and sending them the same virus or stealing your information, especially your bank details.