{"id":3255,"date":"2023-10-02T12:33:03","date_gmt":"2023-10-02T19:33:03","guid":{"rendered":"https:\/\/blogschapman.wpenginepowered.com\/information-systems\/2023\/10\/02\/quishing-a-new-cyber-threat\/"},"modified":"2023-10-02T12:33:03","modified_gmt":"2023-10-02T19:33:03","slug":"quishing-a-new-cyber-threat","status":"publish","type":"post","link":"https:\/\/blogs.chapman.edu\/information-systems\/2023\/10\/02\/quishing-a-new-cyber-threat\/","title":{"rendered":"Quishing: A New Cyber Threat"},"content":{"rendered":"

Quishing, a combination of “QR code” and “phishing,” represents a growing cybersecurity menace that exploits QR codes<\/strong> to entice individuals into disclosing confidential information.<\/p>\n

What is Quishing?<\/span><\/b>\u00a0<\/span><\/p>\n

Quishing is the process of directing an end user to a fraudulent website through a QR code. The design of QR codes makes it impossible for the user to know where the code will direct them after scanning. Cybercriminals create a QR code that looks legitimate, such as one that appears to offer a discount or special offer, but in fact, it directs the victim to a fake website controlled by the attacker.<\/span>\u00a0<\/span><\/p>\n

How does Quishing work?<\/span><\/b>\u00a0<\/span><\/p>\n

Quishing often involves sending an email with a QR code under the guise of a service request, offer, or the threat of being disconnected from a service. For example, an email might say: “Dear Employee, your retirement account statement for the year 2023, covering both quarterly and annual details, is now available for your perusal. Use your smartphone camera to scan the code below for direct access to your earnings statements, account statements, and balance.”\u00a0<\/span>\u00a0<\/span><\/p>\n

Once the code is scanned, it might take the user to a legitimate website and redirect to the fraudulent site. Most often, cybercriminals work to steal your personal and financial information. This type of scam could also be in a physical form. Sometimes, it involves a fake parking ticket placed on your car windshield containing a QR code to pay the fine or a QR code placed on the back of a parking meter, leading you to assume it’s a payment method.<\/span>\u00a0<\/span><\/p>\n

How to Protect Yourself from Quishing<\/span><\/b>\u00a0<\/span><\/p>\n

Here are some tips from the FBI<\/a> to avoid becoming a victim:<\/span>\u00a0<\/span><\/p>\n