The Shady Side of QR Codes

QR codes or quick response codes as they are known are profoundly seen everywhere. Whether it is a magazine or the hoarding of Macy’s we can see businesses applying this marketing gimmick in all arenas. But this marketing tool could just be the loop hole that hackers have been waiting for.

The fact that QR codes are really cheap and even easy to make has made them really popular in the recent times. This has given the cyber criminals a tool to gain access to the data in people's smart phones.

How does a QR code work?

Lets first understand how a QR code actually works. QR codes are basically black square boxes which embed a URL's of websites which can be scanned and deciphered by a smartphone and will lead the user to an add or maybe some malicious website which downloads viruses or trojans onto the phone.  

Why fear Viruses/Malware  in QR Codes??

• Malwares can access the Contacts, Calendar and even credit card information if it is stored on the infected phone
• Usually the passwords of Google, Facebook, LinkedIn and other websites will be stored on the user's phone. Malware can access these passwords and can misuse them for personal gain
• All the smartphone devices usually have location based services associated with them. The viruses can be used to track users location
• Use

Keep yourself safe from malware when scanning QR code!!! 

• Use QR code reader app with in built security features to detect malicious QR codes : Norton Snap is a good example. It's available for both iPhone and Android. What Norton Snap does is once the QR code is scanned, it shows the actual link that was embedded in the QR code. By doing this, the user knows the link which he is visiting. Also it verifies the link against a database of malicious links to let the user know if its a valid site or not. So the users can be saved from the agony of having trojans and malware in their phones.
• Inspect the QR code to make sure that it is not a sticker:Sometimes stickers are put on top of valid QR codes to alter the original content and pass trojans.
• Do not provide your personal log in information on the websites traversed through QR codes. It could be phishing attempts.
• Scan only customized QR codes: The customized QR codes provide information like who created the QR code, what it is for and also the website where it should take you.
• Download a good Anti-Virus software which keeps your phone safe from viruses.

With the above points in mind you are safe to scan those ever awesome QR  codes!

References:

[1]http://www.securitymanagement.com/news/hacker-says-‘don’t-scan-qr-code’-009207

http://2d-code.co.uk/qr-code-virus/
[2]http://www.cnet.com/news/the-dark-side-of-qr-codes/

[3]http://askbobrankin.com/can_qr_codes_spread_computer_viruses.html

[4]http://www.dummies.com/how-to/content/security-risks-that-come-with-use-of-qr-codes.html

[5]http://codezqr.com/blog/wp-content/uploads/2012/02/Mobile-Malware-5.jpg
[6]https://lh4.ggpht.com/oo_s3r-HwEj56cnSCOPXWh6zHkny0Iv8wybAAJpmF3pjztyzm3KhcP2zBc8U5QnRhw0=h900
[7] http://beqrious.com/scanning-qr-codes-be-safe/
[8] http://www.ribbit.net/frogtalk/id/134/3-steps-to-protect-yourself-from-malicious-qr-codes
[9] http://blogs.mcafee.com/consumer/qr-codes-could-deliver-malware
[10]http://netsecurity.about.com/od/securityadvisorie1/a/How-To-Protect-Yourself-From-Malicious-QR-Codes.htm