QR codes being used in phishing campaign

[rslade]

Researchers have discovered a new phishing campaign that doesn't tell you, in words, where it is sending you.  (Imagine that.  Scammers trying to fool you.  Who woulda thunk it?)

They use QR codes.

Oh, you didn't know you could store URLs in QR codes?

Well, here is an example that I, as a long time specialist in malware and social engineering, guarantee is completely safe.

I mean, you trust me, don't you?

[MikeGlassman]

Not sure why anyone would be surprised at this, since this sort of mechanism has been used for quite some time to push people to links without the person really knowing where it is they will be going to.

This is even more obvious when the link you get is a shortened link (which in general I dislike immensely, even if I can understand the need for it).

From there the steps to phishing, or even downloading malicious code is a short one.

[AppDefects]

---

@rslade wrote:

I mean, you trust me, don't you?

---

Click bait!

[rslade]

> MikeGlassman (Contributor I) posted a new reply in Industry News on 07-03-2019

> Not sure why anyone would be surprised at this, since this sort of mechanism has
> been used for quite some time to push people to links without the person really
> knowing where it is they will be going to.

I know. I try to point it out whenever I can: my conference presentations,
whatever the actual topic, always begin with a slide with "my" QR code on it.

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Experience is a hard teacher because she gives the test first,
the lesson afterwards. - Vernon Law
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

[rslade]

> AppDefects (Contributor II) posted a new reply in Industry News on 07-03-2019

> Click bait!

Well, scan bait, maybe ...