Watch out for quishing – or phishing with QR codes

A new scam has emerged involving a QR code sent by email, linking to a malicious site. This new phishing technique is on the rise, so beware!

You’ve probably already heard of phishing, which involves tricking users into divulging personal information in order to steal their identity or their money. It usually takes the form of emails and websites posing as those of well-known brands or institutions.

Today, a new kind of scam is on the rise, known as quishing. This involves tricking people with a simple QR code, and the scam is booming. According to IT security specialist Check Point, the number of quishing attacks increased sevenfold between August and September 2023.

The term ‘quishing’ is actually a contraction of ‘QR code’ and ‘phishing’. Hackers are now making greater use of this method in their malicious activities, mainly via email, because a QR code to be scanned leaves less room for doubt or suspicion than a complex URL. If the user scans the malicious QR code, they are redirected to a page where their personal data can be gathered.

So, in the future, avoid scanning any QR codes you receive by email, and continue to take the suitable precautions when faced with an obvious phishing attempt. The golden rule is to never click on a suspicious link – or in this case a QR code – received in an email, which could send you to a corrupted site.

As a general rule, if you receive an email from your bank, insurance company, social security or even your telephone operator – whether it’s genuine or a phishing attempt – you should never click on any link. When in doubt, it’s best to log into your account directly via the brand or service’s dedicated website or application to check whether the information is correct. Similarly, never open unexpected attachments or attachments in an unfamiliar format. – AFP Relaxnews

1eb4cad5-639b-4e41-a6c7-b45607f9fc44.original.jpg