QR code does not directly hack accounts
On January 17, speaking with a reporter from Dai Doan Ket Newspaper, Mr. Ngo Minh Hieu, a cybersecurity expert from the Vietnam Cyberspace Anti-Fraud Project (Chongluadao.vn) said that in recent days, the project's CyProtek investigation team has received many complaints on social networks Facebook and Tiktok about the fact that after scanning the QR code to transfer money, the application suddenly required a biometric scan, then the device froze, the power went out, and the account was hacked, losing all the money.
"This is completely false information, another version of the "fake news" rumors similar to "clicking on a strange link will immediately get your money hacked" or "just answering the phone will make your bank account lose all the money" that appeared before", Mr. Hieu affirmed.
The cybersecurity expert added that QR (Quick Response) code is a type of two-dimensional barcode (2D barcode) designed to store many types of data, including URLs, text, phone numbers, payment information, or geographic coordinates.
QR codes allow users to quickly access information by scanning it with the camera on their phone or a dedicated code scanning device. QR codes themselves have no security mechanism, only storing information passively.
"However, QR codes do not directly hack accounts or steal money from user accounts. Specifically, the information in QR codes can lead to malicious websites or "It is a scam if not checked carefully before scanning. This is the main reason why users lose money in their accounts if they are not careful," the expert emphasized.
From QR codes, scammers will build familiar scam scenarios such as:
The scammer uses the victim’s familiarity with features like “Scan QR code” or “Transfer money” on Zalo to lure them into making a transaction. When the victim clicks on these features, they are redirected to the money transfer interface right on the app.
QR codes lead to fraudulent websites impersonating banks, financial institutions, and social networks to steal login information, appropriate OTP codes, personal and financial information, etc.
With sophisticated scenarios, luring victims to scan QR codes, then redirecting victims to a website to download malicious fake applications, such as 18+ dating apps or gift receiving apps.
Be careful not to be fooled
To avoid being scammed via QR codes, cybersecurity expert Nguyen Hoang Thang, co-founder of the Chongluadao.vn Project, warns users to never scan QR codes of unknown origin, especially QR codes posted in public places or sent by strangers via text messages or emails.
Before scanning the code, double check that the QR code has not been overwritten or modified from the original code of the seller or organization.
Also be careful with attachments. Do not download attachments from untrusted emails or messages. Be especially careful with files with dangerous extensions such as .bat , .apk , .rar , .zip , .exe , .docx , .xlsx , .pdf .
Use a virus scanner like VirusTotal.com to check the file before opening it.
Also, always check the link carefully for typos or fake website addresses.
Do not trust calls from people claiming to be police, bank, post office, or public service employees, especially if they ask to scan a QR code or download an app from outside the CH. Play or App Store.
If anything is unclear or in doubt, ask an information security expert, the relevant authority, the bank or contact the relevant organization directly for confirmation.
Source: https://daidoanket.vn/thong-tin-chuyen-tien-qua-ma-qr-bi-hack-tai-khoan-la-tin-gia-10298488.html
Comment (0)