Counterfeit QR is a new trap that awaits shoppers to steal sensitive data

The Cybersecurity Council warned that QR codes may pose a hidden cyber threat if they are scanned from untrusted sources, causing the theft of sensitive information and data, which requires always ensuring that the “HTTPS” protocol and the lock code are applied to ensure a secure connection. Citizens and residents are exposed to cyber phishing attempts, through criminals using fake QR codes to direct them to fake websites or applications run by fraudsters, to steal their data and plant malware on their phones.

In detail, the Cybersecurity Council explained that quick response (QR) codes are a modern convenience, but they may pose a hidden cyber threat. Although they provide quick access to menus, payments, and promotions, some of these codes may direct you to phishing sites designed To steal your sensitive information.

The Council said, as part of its “Be Careful” awareness campaign that it is carrying out on its official accounts on social networking sites: “To maintain your security, avoid scanning codes from unreliable sources, and always make sure that the “HTTPS” protocol and the lock code are in place to ensure a secure connection, and use security tools. To verify the safety of links before clicking on them.

The council added: “What if these small, easy-to-use boxes hide a dangerous threat? Not all QR codes are safe, as some of them may lead you to phishing sites specifically designed to steal your information and sensitive data, so protect yourself before scanning, and be careful before you make your choices, avoid scanning QR codes from unknown and suspicious sources, and verify the target site by ensuring Apply the (HTTPS) protocol, which is one of the technologies used to secure user data circulated over the Internet, and use a lock code to ensure a secure connection. Use scanning intelligently, and use cybersecurity tools, such as Stay. Safe.ae to verify the integrity of links.

While shoppers reported to Emirates Today that they had been subjected to attempts to steal their data and money via fake QR codes, Ahmed Abdel Rahman said that he saw an advertisement for an apartment for rent in a distinguished location, at a very attractive price, and with the advertisement there was a QR code through which the picture of the apartment could be seen, pointing to He became suspicious of the matter, and scanned the QR code through another phone that did not have any data or his bank application on it, and discovered that the QR took him to another site that had nothing to do with the advertisement. Or the apartment, so he immediately ended the call, and after a while the advertised account disappeared from the social media application.

Basma Farouk indicated that she received an advertisement through the WhatsApp application for discounts for famous brands, and that obtaining the discount code required scanning the response code in the advertisement. She was skeptical about it, especially since the language of the advertisement was poor and indicated that its writer did not know the correct vocabulary of the Arabic language.

Faisal Awad pointed out the fake job advertisements that invite job seekers to scan the response code to register for the job. Once you scan the QR, it leads you to links asking you to click on it and register, through which the user’s confidential data is seized and stolen.

Citizens and residents: Hamad Issa, Majed Samih, and Nadia Fakhri warned that fraudsters would use new methods to deceive victims, including advertisements for “online” private lessons at a nominal price, or free Qur’an memorization groups, and food menus, in addition to advertisements for purchasing movie tickets and discounted entertainment venues. , or offers to book hotels and flights, and all that is required is to scan the response code to enter, register or purchase, and when scanned, it leads users to malicious websites, or requires entering personal information. Secret, and then immediately stolen.

For his part, the technical expert, Engineer Ahmed Abdel Nasser, called on individuals to be careful when using QR codes in their dealings, and to avoid downloading any application or file from a site that the user went to via the QR code. Instead, the known and trusted link address can be entered manually. To complete the download process.

Abdel Nasser warned of the necessity of not downloading a QR code scanner application, as this increases the risk of downloading malicious software onto the user’s device, noting that most phones have a built-in scanner through the camera application, and an application store can be used on the phone for a safer experience.

He stressed the necessity of constant communication with anyone who sends a quick response code, even if the recipient of this code knows the sender well, and the need to ensure that he sent the code.

While two bankers, Mahmoud Nassar and Muhammad Samir, warned of the danger of this type of fraud, given its increasing sophistication, as anyone can create a QR code online using a set of free tools available, noting that the danger lies in that all QR codes They look similar in design, and you can’t tell what the QR code will ask the device until it’s scanned.

He pointed out that fraudsters aim, through fake response codes, to steal sensitive information, such as passwords or financial data, and many people fall victim to these gangs.

Experts:

. Direct communication is better than using QR, and it is necessary to avoid random advertisements.