Hackers are exploiting public willingness to scan QR codes in 'quishing' attacks that have now hit tens of millions of Americans.

KEY POINTS

Almost three-quarters of Americans (73%) scan QR codes without verification, and more than 26 million have already been directed to malicious sites, according to NordVPN.

The FTC warned earlier this year about scanning QR codes on unexpected packages.

New York City’s Department of Transportation issued a warning that scammers are posting QR codes on parking meters that are not legitimate payment links.

  • salacious_coaster@infosec.pubEnglish
    33·
    4 days ago

    I find it difficult to have sympathy for people who suffer predictable consequences after scanning unknown QR codes left in public.

    • IamSparticles@lemmy.zipEnglish
      1·
      3 days ago

      I don’t go around scanning random codes, but often times I have to scan a code for something like paying for parking. How can I know if someone put a sticker over it with a malicious URL?

      • salacious_coaster@infosec.pubEnglish
        2·
        3 days ago

        A QR code handed to you by a restaurant employee would not be “unknown.” I was thinking of codes found left at a bus stop or something.

        Also, QR code menus are a dick move by a restaurant, and I would just walk out, personally.

      • vaultdweller013@sh.itjust.works
        3·
        4 days ago

        Clearly those restaurants are cheap shitholes and don’t deserve business. What ever happened to having a board, if you don’t want individual menus just put up a couple boards that are visible from the tables and booths.