Eyeing the Risks That QR Codes Pose to Security and Privacy

The fact that QR Codes are so cheap and easy to make, and that consumers are so eager to scan them to see what they reveal, makes a QR Code a good tool for cybercriminals. Think about it: Scanning a QR Code poses a lot of the same threats as opening a dubious web page without any of the warnings that generally come with the latter.

One advantage of opening web pages is that you can see the link you’re opening, and if it doesn’t look right, you can pass on clicking it. That’s not true with QR Codes. You just point and scan and don’t really think about the risks.

warning_bomb.eps The threat is that the QR Code could have a malicious URL embedded in it that takes you to site malware — short for malicious software — that can be, unbeknownst to you, installed on your mobile device. Malware can comprise your device’s software and share sensitive information with cybercriminals. Some of the ways that malware poses a threat to you include:

check.png Making your calendar, contacts, and even credit card information available to criminals

check.png Stealing your Facebook, Google, and other passwords and posting without your knowledge or permission

Tracking your location ...

Get QR Codes For Dummies, Portable Edition now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.