What is quishing?
Quishing is a phishing attack that uses malicious QR codes to trick victims into giving away sensitive information. By scanning these QR codes, users are often redirected to fake websites designed to steal sensitive information, or they are tricked into downloading malicious software.
What can you do to avoid quishing?
-
Be skeptical of unknown QR codes: Only scan QR codes from trusted sources. If you receive a QR code via email or text message, be extra cautious.
-
Check the URL: When you scan a QR code, carefully check the URL before providing personal information or downloading anything.
-
Use security software: Ensure your device has up-to-date security software that can detect and block malicious websites.
-
Avoid scanning QR codes in public areas: Scammers can place fake QR codes over real ones in public places like restaurants or stores.
-
Be cautious with apps: Only download apps from official app stores and be wary of apps that require scanning QR codes.
Sicra and quishing
Sicra has several experienced security consultants who can help if you have been subjected to a quishing attack. Our CISO-for-hire can also provide security consulting to implement good practices around the use of QR codes.
Services:
Read about our "CISO-for-hire" service here >
Read about "security training" here >
Related terms: Phishing, Social engineering.