Cybersecurity

5732 readers

87 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 1 year ago

MODERATORS

kid

[email protected]

Malicious QR codes (blog.talosintelligence.com)

submitted 3 days ago* (last edited 3 days ago) by Joker to c/cybersecurity

4 comments fedilink hide all child comments

QR codes are disproportionately effective at bypassing most anti-spam filters, as most filters are not designed to recognize that a QR code is present in an image and decode the QR code. According to Talos’ data, roughly 60% of all email containing a QR code is spam.

Talos discovered two effective methods for defanging malicious QR codes, a necessary step to make them safe for consumption. Users could obscure the data modules, the black and white squares within the QR code that represent the encoded data. Alternatively, users could remove one or more of the position detection patterns — large square boxes located in corners of the QR code used to initially identify the code's orientation and position.

Further complicating detection, both by users and anti-spam filters, Talos found QR code images which are “QR code art”. These images blend the data points of a QR code seamlessly into an artistic image, so the result does not appear to be a QR code at all.

top 4 comments

sorted by: hot top controversial new old

[–] [email protected] 8 points 3 days ago (1 children)

Just two days ago there was a warning on the radio that in a few cities, criminals have placed stickers with their own QR codes over the original ones on the parking ticket vending machines. So if you want to purchase a parking ticket online, it sent you to their own website, faked to look like the original one, and requested to enter CC data for the payment.

[–] [email protected] 5 points 3 days ago

That's clever.

[–] [email protected] 3 points 3 days ago

roughly 60% of all email ~~containing a QR code~~ is spam.

FTFY

Also, good spam filters will "detonate" the email and detect QR code spam. They'll follow the link in the code and check it out.

[–] Cheradenine 2 points 3 days ago

Many email providers have a 'do not load images' setting. The two I use, Tuta Mail, and Proton Mail, both have it and I keep it on. When your mom sends you a photo of her new kitten you can just 'Tap to show images' or something similar. Images will not be loaded automatically, you need to do it case by case.

For QR codes in the wild, don't scan them, if you do use something like Binary Eye which let's you see the path before they are executed. At least you will know the domain isn't cryptoscam.com