One of our IT clients suffered a minor QR Code attack, when they discovered that their QR code they had displayed in their window had been covered, outside the glass, by another code on a sticker. This code pointed to a Facebook page for a local music gig – so there was no real harm done, once the sticker was removed. However a quick visit to the Facebook page did show a lot of messages from annoyed shop owners who had suffered the same sticker attack!
But replace that code with something more malicious and then there is a problem – such as this case with e-scooters:
E-Scooters: An unexpected cyber risk | Visualize | Verisk
Most modern smartphones cameras can scan a QR code for you – my top tip is to use that, rather than an app to scan with as they give a preview of what the code does. But that is not complete protection – so be very aware of what you are scanning.
More about QR codes
There is a very good article about QR codes over on SANS Internet Storm – including a simple decription on how they work and how they are hacked – by Guy Bruneau.
Revealing the Hidden Risks of QR Codes – SANS Internet Storm Center
Clive Catton MSc (Cyber Security) – by-line and other articles
p.s. The code on this page is safe!
