Watch out for QR code scams being sent through email

Scan a QR code and you can get information such as recipes, menus, website links and links to download apps, coupons and more. Quick Response (QR) codes were created to track automotive parts, but they’re everywhere now.

There are many third-party QR scanning apps, but you don’t even need one. Your iOS or Android phone’s camera can scan QR codes without the need for any additional software. Tap or click here for our detailed instructions.

While convenient and entertaining, scanning a QR code can expose you to malware and scams. Crooks use QR codes to steal credit card details and other sensitive information. Here’s what you need to know.

Here’s the backstory

Cybersecurity researchers at HP have been following a Chinese-language phishing campaign distributed through Office documents sent through email. The documents contain no malicious code — just some text and a QR code.

The senders pose as the Chinese Ministry of Finance and similar institutions, informing recipients they are entitled to a government grant. Of course, they’re advised to act quickly (a common tactic wielded by many scammers).

The document contains bits of information to make it seem more legitimate, such as copyrights and security notices. Recipients are told to scan the QR code using WeChat, a popular social media app that offers payment options and messaging.

Scanning the code leads to a webpage containing the same information as the Word document from the email. There’s a button to get the “grant application” started. There’s also a request for payment card information.

The unsuspecting victim enters their bank card number, and that’s it, right? No, it doesn’t end there. The crooks ask for more information, such as credit balance and limit, which they’ll likely use to get around fraud detection. But no matter what they use it for, the more information they have, the more damage they can do.

Just because this scam is making the rounds in China doesn’t mean scammers can’t do the same thing here. There’s no language barrier when it comes to crime.

RELATED: Watch out! These QR code scams are tough to spot

HP has been tracking these campaigns since the end of October and says they are being distributed in high volumes. The messages are structured in a way that makes it easy for attackers to change the theme and lures as they see fit.

Continue reading

What is Hive? How to use the popular new Twitter alternative

Elon Musk has a ton of plans for Twitter. Not only does he want to turn it into “an everything app,” but he also wants to incorporate paid subscriptions. Whenever there’s change, people leave the nest. This is why many social media users are searching for the top Twitter alternatives.

Continue reading

Social media warning labels

Open/download audio

What if your social media app came with a warning label? The U.S. Surgeon General thinks it might be a good idea. Will it make a difference?

3 ways Twitter could change immediately with Musk in control

Have you followed Kim on Twitter? You’ll get information on our latest stories, Kim’s Daily Tech Update, tips on deals and more. Find her at twitter.com/kimkomando. Speaking of Twitter. Elon Musk has been making headlines lately with his activity on the social media site.

Continue reading

Check your phone! These copycat apps are spreading spam

When it comes to apps, there’s plenty to choose from. Whether you’re using an Android device or an iOS phone or tablet, you have options for productivity apps, entertainment apps, sleep apps or even meditation apps.

Not all are destined to stay in the app stores for long, though. Both Google and Apple are known to remove apps that are problematic or violate their terms of service. Both Apple and Google pulled the social media app Parler recently, too.

Continue reading