Comment on The growing abuse of QR codes in malware and payment scams prompts FTC warning
scorpionix@feddit.de 6 months ago
So the issue isn’t QR codes, but people being unable to recognize scammers additions to public infrastructure and the websites being scams. Basically, it’s the same principle as scammers sticking an additional device on top of cash machines.
No news here.
RGB3x3@lemmy.world 6 months ago
Okay, but explain to me how you’re supposed to tell the difference between a legitimate QR code and a fake one?
It’s trivially easy to make a mockup of a restaurant’s QR menu so that people scan it when they sit down, expecting to get an online menu.
scorpionix@feddit.de 6 months ago
Is the QR Code applied professionally to the surface, possibly behind some security feature such as glass or another surface finish? Is the menu on the table in the general style of the restaurant, or does it look off or entirely different? Is the QR code applied on top of something else, possible another QR code?
Don’t use apps which directly open QR codes. Any sensible app will tell what the information is before processing it.
And at last, the simplest and most efficient security measure of all: Commonsense. Don’t scan everything you come across. Restaurant menu? Sure. Some random poster out in the woods promising a quick buck, happy time or their like? Hard pass.
Nollij@sopuli.xyz 6 months ago
Part of the problem with security is they even when it’s legitimate, it acts like the scammers.
I’ve seen restaurants where their (legitimate) QR code is clearly printed on a home printer and used in lieu of physical menus in order to save money. If the link changes, they will simply tape the new one on top of the old, even on the most official copy you can find.
phx@lemmy.ca 6 months ago
Given that how restaurants present these various greatly, it wouldn’t be terribly unexpected for the official QR to be a sticker on the menu or table either
RGB3x3@lemmy.world 6 months ago
I’ve been at restaurants where that’s exactly the case. The QR is just a sticker on the table. Or a laminated card with the code on it.
Would be trivially easy to replace it with a malicious site.