*Quishing*... not just a funny word!
As part of our commitment in keeping you informed about the latest cyber threats, I want to raise awareness about QR code phishing—also known as “quishing.” QR codes are used everywhere today - from parking meters, restaurants, kiosks, commercials, and more.
As QR codes become more common in both work and personal settings, scammers are finding new ways to exploit them, tricking people into scanning fake QR codes leading to malicious websites. Whether it’s a restaurant menu, a parking meter, or an email in your inbox, it’s critical to remain vigilant.
Below are some best practices to keep in mind before interacting with QR codes:
1. Always check the URL: After scanning a QR code, make sure the website address starts with ""https"" - this indicates a secure connection. This is especially important when entering personal or financial information. Also, watch for subtle signs of a scam, like misspellings or unusual domain names.
2. Search the company website directly: Before entering any personal or financial information, it’s a good idea to search for the company’s official website through a browser. This allows you to check and validate the URL that appears after scanning the QR code. How can you know, if you don't know?
3. Use more secure options: When available, use safer payment or login methods, such as company apps or direct browser links, rather than relying on QR codes.
4. Report suspicious QR codes: If a QR code looks like it’s been tampered with, such as a sticker placed over the original, avoid scanning it and report it.
By keeping these precautions in mind, you can protect yourself from falling victim to QR code phishing scams (quishing).
Fennec Alert - Aware. Watchful. Always