The Security Concerns of QR Codes

Quick Response (QR) codes are two-dimensional barcodes consisting of black and white squares arranged in a square grid on a white background.

They were developed in 1994 by the Japanese company Denso Wave, a subsidiary of Toyota, as a way to track vehicles during the manufacturing process. However, their use has since expanded beyond the manufacturing industry to other sectors such as advertising, marketing, retail, ticketing and payment systems. They are widely used throughout the world today due to their their convenience, versatility, and ability to connect the offline and online worlds.

QR codes contain a large amount of information, including text, URLs, and even multimedia content such as images and videos. They can be easily scanned using a smartphone camera and a QR code reader app, making them a convenient tool for accessing information on the go.

They are used for a variety of purposes, such as directing customers to a company's website or social media page, providing product information or discounts, making payments, and even contact tracing during the COVID-19 pandemic. Overall, the use of QR codes has become increasingly popular due to their ability to provide quick and easy access to information, making them a valuable tool for businesses and consumers alike.

While QR codes are a convenient way to share information, they also come with some security concerns:

  1. Malicious Codes - QR codes can be used to direct users to malicious websites, which can infect their device with malware or steal personal information.
  2. Phishing Attacks - QR codes can also be used in phishing attacks, where attackers use fake QR codes to trick users into giving away sensitive information such as passwords or credit card numbers.
  3. Spoofing - QR codes can be spoofed, where attackers create fake codes that look like legitimate ones but lead to malicious websites or apps. Legitimate QR codes in public areas can be easily be pasted over by compromised QR codes.
  4. Social Engineering - Attackers can use social engineering techniques to convince users to scan a QR code, which can lead to the installation of malware on their devices or the disclosure of sensitive information.
  5. Privacy Concerns - QR codes can also be used to collect personal data such as location, device information, and browsing history, which can be used for targeted advertising or other malicious purposes.

To protect yourself from these dangers and security concerns, it is recommended that you only scan QR codes from trusted sources. You should also keep your device and security software up-to-date, and use only a reputable QR code reader app that can detect and warn you about potentially malicious codes.

The Future of Scamming

Scammers have always been a part of the global economy, but the rise of technology and the internet has led to an explosion in the number and variety of scams. The most recent trend in scamming is the use of social media and online platforms to target individuals and businesses.

One popular scam is the "phishing" scam, in which scammers send emails or messages that appear to be from a legitimate source (such as a bank or government agency) in order to trick people into giving away personal information or money.

Believe it or not, the few paragraphs above are AI generated. Tools such as ChatGPT allow a user to conduct natural language conversations with software, and the software to respond in a way that on many occasions, pass off as a real human.

Consider 4 years ago, Google highlighted new technology for a digital assistant to make a phone call to a restaurant to make reservations, or to a hairdresser to make an appointment.

Click this link to see it on YouTube.

In the same year 2018 - comedian Jordan Peele produced a deepfake video of President Obama saying things he wouldn't say. Watch it here.

Consider that most scamming and phishing attempts currently received on email or text are poorly formatted, or have spelling mistakes, or bad grammar. In Singapore, the IMDA has gone on a campaign over the past few years educating the public on how callers with a +65 prefix are possibly scam calls. This may cause people to instinctively trust what appear to be legitimate local numbers. Well, the scammers have found a way to call from a non +65 number.

How else can scammers up their game? What if they automated the process using natural language tools and deep-faked voices (or more scarily, deep-faked video)? What if you received an urgent video call from your boss asking you to buy some gift cards? Or from a frantic child saying they have been kidnapped and that her captors are demanding a ransom?

No matter how technology evolves to counter scammers and phishers, the bad actors will always come up with something more sophisticated. Scammers rely on impulsive actions to get what they want. It is up to the individual to be the final line in the defense of their personal information and money.

Some of us are fortunate enough to have corporate training on good cybersecurity hygiene, but continual personal training and practice in critical thinking is the key to keeping safe. Always think of the veracity of the message before you respond.

 

Tips and Strategies for Staying Safe Against Scams

In recent years, scams have become increasingly prevalent, with scammers using a variety of tactics to trick people into giving them money or personal information. Some common scams include phishing emails and text messages, fake online advertisements, and phone scams.

Types of Scams

Phishing scams involve sending fake emails or text messages that appear to be from a legitimate source, such as a bank or government agency, in order to trick the recipient into giving out personal information or money. These scams often use urgent language and threats, such as claiming that the recipient's account has been compromised and that they need to provide personal information to fix it.

Fake online advertisements, also known as "clickbait," often promise a free product or service, such as a gift card or a chance to win a prize, in order to trick people into clicking on a link and providing personal information. These ads are often found on social media platforms or in pop-up ads on websites.

Phone scams involve unsolicited phone calls from someone claiming to be from a government agency or a business, such as a utility company, in order to trick the recipient into giving out personal information or money. These scammers often use tactics such as threatening arrest or disconnection of services if the scammer's demands are not met.

These are just a few examples of the many types of scams that are currently circulating. It's important to stay vigilant and to be wary of unsolicited messages or phone calls, especially those that ask for personal or financial information.

The top 10 scams for the first half of 2022 were:

  • Job
  • Phishing
  • E-commerce
  • Investment
  • Social media impersonation
  • Fake friend call
  • Loan
  • Internet love
  • Credit for sex
  • Fake gambling platforms

Protect Yourself

Here are some tips for protecting yourself against scams:

  1. Be wary of unsolicited phone calls, emails, or text messages, especially those that ask for personal or financial information.
  2. Don't click on links or download attachments from unknown sources.
  3. Be skeptical of "too good to be true" offers, such as those that promise large sums of money or ask for an upfront fee.
  4. Don't give out personal information, such as your Social Security number, credit card information, or bank account numbers, unless you initiated the contact and know the organization is legitimate.
  5. Keep your computer and mobile devices secure with anti-virus software and a firewall.
  6. Do your research before making any major purchase or investment.
  7. Don't be afraid to hang up or delete the message if something seems suspicious.
  8. Report any suspicious activity to the authorities.
  9. Keep your self updated with the latest scam methods and how to avoid them.

It's also important to keep in mind that scammers are becoming increasingly sophisticated, so it's important to stay vigilant and not let your guard down.

In Singapore

On 18 January 2023, an event titled "Scaminar! ACT Against Scams" was held at the Suntec Singapore Convention and Exhibition Centre, as well as virtually via live stream. This event was jointly organised by the Ministry of Home Affairs, the Singapore Police Force and the National Crime Prevention Council (NCPC), in partnership with The Straits Times.

At this event, the ninth edition of the anti-scam campaign by the NCPC, with the refreshed tagline “I can ACT against scams” was launched. The ACT acronym in the new campaign tagline outlines how members of the public can Add security features, Check for signs, and Tell the authorities and others about scams.

  • Add security features such as ScamShield and two-factor authentication for personal accounts. Also, set up transaction limits for Internet banking, to limit the amount of funds possibly lost in the event of a scam.
  • Check for potential signs of a scam by asking questions, fact-checking requests for personal information and money transfers, and verifying the legitimacy of online listings and reviews. Take the time to pause and check. If it is too good to be true, it is probably untrue, and a scam.
  • Tell the authorities and others about scam encounters by reporting to the bank, ScamShield, or by filing a police report. Tell others about ongoing scams and preventive steps they can take.

Read more...

Scroll to top