Finally, someone other than me is warning about the use of malicious QR codes. Apparently, WhatsApp launched its web version, which has a requirement to use QR codes to function properly. Call me crazy, but I absolutely do not trust Facebook so why should we think that WhatsApp (owned by Facebook) is even concerned about your safety or security on the Internet? The problem is that you really don’t know where the QR code is going to send you or what data will transfer. It could be a discount code for cheaper meals or it could deliver the installation of identity stealing software.
Sharon and I just gave a CLE presentation about information security to the ABA Section of Intellectual Property Law last week, where I described how the bad guys are putting stickers with malicious QR codes on restaurant menus along the streets of Anytown, USA. As Forensic Magazine stated, “This is why scammers are now using malicious QR codes for tricking users.”