Sunday, April 27, 2025
HomeMalwareQR Codes Popularity May Abused to Deliver Malware and Banking Heists

QR Codes Popularity May Abused to Deliver Malware and Banking Heists

Published on

SIEM as a Service

Follow Us on Google News

Nowadays the use of QR codes has increased swiftly, as we all know that the COVID-19 pandemic has brought many remarkable changes among peoples.

Because of this pandemic situation, people are using mobile quick-response (QR) codes in daily life, these QR codes are very handy for both work and personal use.

After the declaration of work from home, people started using all hand devices that will help them to connect to business-critical systems and applications.

- Advertisement - Google News

However, a new report of Ivanti pronounced that they have carried a survey of 4157 users from all over the world like China, France, Germany, Japan, the U.K., and the U.S. 

QR codes – An Increasing Cybersecurity Threat

After conveying the survey, Ivanti came to know that there are 83% of users who have used the QR codes for the very first time. 

But users don’t know that the increase in the usage of QR codes will also open up many opportunities for different threat actors. And the threat actors might use those opportunities to steal corporate data, they can also infiltrate mobile devices with the help of QR codes.

However, the threat actors always try to find different occasions so that they can carry out their planned operations and eventually wreaking destruction on businesses.

Capabilities of Malicious QR Codes

The capabilities of malicious QR codes are mentioned below:-

  • These codes can add all malicious contacts to the contact list.
  • The codes directly connect the system device to the malicious network.
  • It also helps in initiating phone calls.
  • It also sends text messages.
  • With the help of malicious QR codes threat actors can drafts an email.
  • These codes can reveal the user’s locations. 
  • With the help of these malicious QR codes, hackers can make different payments.

How users could be putting themselves at risk?

  • 47% of users came to know that the QR codes can be open a URL.
  • On the other side, only 37% of users know that the QR code can download an app.
  • Only 22% of users know that these QR codes can also provide the physical location.
  • 39% of users were confident and asserted that they know about the malicious QR codes, and identify them.
  • While 49% of users were confused that they either do not have or don’t know if they have security tools installed on their devices.

Prevent QR Code Cyberattacks

After knowing all the details regarding the QR codes, Ivanti claimed that there are some preventions that will help the users to keep alerted and safe from malicious QR codes or QR cyberattacks. 

Here are the preventions mentioned below:-

  • After scanning a QR code, if any users get a notification to put any password or information, then it’s a suspicious code.
  • Remember to check before scanning any random QR codes.
  • Avoid QR codes that were received through emails, one can scan the code if it is legitimate.
  • Avoid scanning a QR code if it is reprinted on a label and implemented above another QR code.

All these QR code threats are increasing day by day, and such opportunities will undoubtedly be used more and more by the attackers to infiltrate devices and steal many corporate data from the devices.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity, and hacking news updates.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

How To Use Digital Forensics To Strengthen Your Organization’s Cybersecurity Posture

Digital forensics has become a cornerstone of modern cybersecurity strategies, moving beyond its traditional...

Building A Strong Compliance Framework: A CISO’s Guide To Meeting Regulatory Requirements

In the current digital landscape, Chief Information Security Officers (CISOs) are under mounting pressure...

Two Systemic Jailbreaks Uncovered, Exposing Widespread Vulnerabilities in Generative AI Models

Two significant security vulnerabilities in generative AI systems have been discovered, allowing attackers to...

New AI-Generated ‘TikDocs’ Exploits Trust in the Medical Profession to Drive Sales

AI-generated medical scams across TikTok and Instagram, where deepfake avatars pose as healthcare professionals...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

North Korean APT Hackers Pose as Companies to Spread Malware to Job Seekers

Silent Push Threat Analysts have uncovered a chilling new cyberattack campaign orchestrated by the...

Russian VPS Servers With RDP and Proxy Servers Enable North Korean Cybercrime Operations

Trend Research has uncovered a sophisticated network of cybercrime operations linked to North Korea,...

New Malware Hijacks Docker Images Using Unique Obfuscation Technique

A recently uncovered malware campaign targeting Docker, one of the most frequently attacked services...