CALL US: 01292 811 810

Can You Spot The Phishy QR Code?

Can You Spot The Phishy QR Code?

Another day, another phishing scam... and this one could catch anyone off guard.

Ever scanned a QR code with your phone? It's a convenient way to access information. But did you know that there's a new form of phishing out there that's using QR codes to hide harmful links? It's called 'quishing”.

What's the deal?

QR codes are everywhere nowadays, and we often scan them without thinking twice. They're on parking meters, in text messages, emails, and even on product packaging. We've all just accepted QR codes as harmless tools to access information quickly. But cyber criminals are counting on this trust we have in them.

In a quishing attack, scammers create fake QR codes that look innocent, then trick you into scanning them – maybe to reschedule a package delivery, confirm account information, or address suspicious activity. The key here is urgency; they want you to act fast without thinking.

So, why is this a big problem? Well, for one, mobile devices are vulnerable to these attacks. Unlike most desktop operating systems, phones often lack built-in phishing protection. And that's what makes them an easy target for cyber criminals.

 

 

 

 

 

How can you protect yourself and your business?

First, avoid scanning QR codes from unknown sources and check for evidence of tampering. Payment QR codes in public areas, like car parks, can be covered with imposter stickers, taking you to a different website. Also take a moment to inspect the URL it leads to. Look for misspellings or odd characters in the URL.

If you receive an unexpected email or text with a QR code urging you to act immediately, don't scan it.
Instead, verify the legitimacy of the sender using a confirmed phone number or website. Legitimate companies will provide clear instructions without asking you to scan a QR code for verification.

Watch out for link shorteners such as bit.ly links: Whilst being helpful in reducing the link to only a handful of characters, it obfuscates the destination. They can be safely previewed by adding a plus symbol (“+”) at the end of the URL.

Lastly, strengthen your phone and online account security.

Keep your phone's operating system up to date, use strong passwords, and enable multi-factor authentication wherever possible.

So, which QR code below is legitimate?