What is quishing and how to avoid QR code scams

The digitalization of QR Codes has enjoyed notable popularity in recent years.

This is a method of storing certain types of information, such as website URLs, which has become popular since the Covid-19 pandemic in order to avoid physical interactions with objects or people.

It has a wide range of uses, such as viewing a restaurant menu, canceling an account, identifying a package to send, and even paying for public transportation.

The problem is that, as happened with others technologies QR codes are associated with several risks.

Due to their current rise, a new type of scam has emerged that uses this tool to commit fraud. This is the crush .

QR codes are data representations that can be scanned with smartphone cameras. Once the reader deciphers the code, it usually stores a link, although it can also be other types of content such as text and images.

Much of their popularity is due to the fact that they are simple and effective to use to obtain information.

Quishing, also known as qrishing, takes advantage of this advantage that technology has: This is a type of cyberattack that uses fraudulent QR codes to deceive users, direct them to malicious websites, and steal sensitive data.

It is also a type of phishing – hence the name – which is a strategy in which cybercriminals use emails or calls to impersonate trusted people and thus attack the user.

This type of cyberattack usually relies on the user seeing a seemingly innocuous QR code and deciding to scan it with their device, with the same ease as if it were a genuine code. . Then the option to visit a URL appears and it directs to a malicious page, without the user being able to identify that it is not safe. The page then seeks to steal sensitive information, such as banking information, login credentials, as well as install malicious software (malware).

Scott Ruoti, professor of computer science at the University of Tennessee (United States), detailed BBC Another method that could happen with fraudulent QR codes is that after scanning them, the URL leads to a genuine site and the technology tricks it into doing something harmful to the user.

Misleading QR codes could be present in public places, especially where users intend to view a menu, access public Wi-Fi or view an advertising offer.

From Infobae They point out that summer tends to be the period when attacks of this type occur the most, since during the holidays people constantly need to use this technology to consume in restaurants and tend to be a little more carefree.

Recognizing QR codes with malicious purposes can be a complex task, given that they appear identical to legitimate codes.

However, certain strategies can be implemented to provide more protection against this type of cyber attack.

• Beware of QR codes of unknown origin that arrive unexpectedly. If you come across one on the public road, or have received it in your email or in a message without having requested it, avoid scanning it to preserve your safety.
• If you make payments or transactions with QR codes, verify that the action was successful for both the buyer and the seller.
• If the QR code is printed in a store, restaurant, or other business, try to make sure it hasn’t been tampered with or that there isn’t a sticker stuck over the real code. If you notice any irregularities, inform those responsible.
• Some apps focused on scanning QR codes allow you to preview a URL. This can be useful to check the security of the link and avoid falling into quishing.
• Keeping your device software up to date can be another useful measure to protect yourself against a cyberattack.