KEY POINTS

Almost three-quarters of Americans (73%) scan QR codes without verification, and more than 26 million have already been directed to malicious sites, according to NordVPN.

The FTC warned earlier this year about scanning QR codes on unexpected packages.

New York City’s Department of Transportation issued a warning that scammers are posting QR codes on parking meters that are not legitimate payment links.

  • Ecco the dolphin@lemmy.ml
    link
    fedilink
    arrow-up
    17
    arrow-down
    4
    ·
    2 days ago

    I’m confused, isn’t this just as risky as seeing a URL in the wild and typing it into your phone? Don’t all phones display the URL you are about to visit?

    The problem isn’t the QR code itself, correct? It’s a lack of education, and an incurious public that has no interest in learning about the technology that they depend on.

    Seems like a skill issue.

    • dogslayeggs@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      1 day ago

      No, because phones don’t show the URL you are going to. I can go to a restaurant and scan the menu, but the link that it shows me is “qrl.io/asccand…” because A) the restaurant used a URL shortener, and B) the phone truncates the URL to fit in the space.

    • Dozzi92@lemmy.world
      link
      fedilink
      arrow-up
      7
      ·
      1 day ago

      I scan some legit QR codes and the URL preview is nonsense, because everyone uses link shortners and whatnot. I also don’t scan random QR codes because I don’t need any more information right now, I’m informationed out.

  • adarza@lemmy.ca
    link
    fedilink
    English
    arrow-up
    23
    ·
    2 days ago

    malicious qr codes have always been around. i remember the local news reports of them plastered to store directories at the mall. ya, that long ago.

    • BakedCatboy@lemmy.ml
      link
      fedilink
      English
      arrow-up
      26
      ·
      edit-2
      2 days ago

      I remember going to defcon in 2016 and there was a guy wielding a foam sword with a qr code t-shirt that said “scan me”, and when you scanned it and told him it said “arrrr”, he’d beat you with the sword while berating you for scanning an untrusted code.

      Damn I’m just realizing that was almost 10 years ago

  • Luffy@lemmy.ml
    link
    fedilink
    arrow-up
    9
    ·
    2 days ago

    Please note: Le source is le NordVPN

    Just saying:

    The statistic can not be applied to the wider population, since People who use such Services on a day to day Basis are usually the same ones who believe the lies NordVPN is throwing at them.

    It would be like going to a ecstasy dealer and asking them how many people like drugs. Of course they will answer everyone, first because they have an incentive to advertise their services (nord advertises their VPN + Antivirus for blocking Malware) and even if they try to be neutral, they just don’t have the data, since people who go to a Dealer are likely to like drugs, the same way people who believe Nord are the same ones who are likely to fall for such things

    • TheRealKuni@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 day ago

      It really does irk me that they pretend their service makes the internet safer for their users.

      They have a good product in their VPN+Meshnet, but it wouldn’t have nearly the broad appeal it does if they were honest about it.

  • salacious_coaster@infosec.pub
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    3
    ·
    2 days ago

    I find it difficult to have sympathy for people who suffer predictable consequences after scanning unknown QR codes left in public.

    • IamSparticles@lemmy.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      I don’t go around scanning random codes, but often times I have to scan a code for something like paying for parking. How can I know if someone put a sticker over it with a malicious URL?

      • salacious_coaster@infosec.pub
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 day ago

        A QR code handed to you by a restaurant employee would not be “unknown.” I was thinking of codes found left at a bus stop or something.

        Also, QR code menus are a dick move by a restaurant, and I would just walk out, personally.

      • vaultdweller013@sh.itjust.works
        link
        fedilink
        arrow-up
        4
        ·
        2 days ago

        Clearly those restaurants are cheap shitholes and don’t deserve business. What ever happened to having a board, if you don’t want individual menus just put up a couple boards that are visible from the tables and booths.

  • womjunru@lemmy.cafe
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 days ago

    Wow that’s a great (criminal) idea to make money. I guess that’s fraud? I suppose it depends on the wording and the fine print.