QR codes are being used to spread malware
By Will Shanklin 10.21.2011 :: 10:48AM EST 10.21.2011
Just when you thought that keystroke logging by an iPhone was your biggest mobile security concern, the folks at Kaspersky Lab are saying that you need to be careful with QR codes. Apparently some have already had their code altered so that a scanning phone sends out unwanted premium text messages.
One of the firm's malware researchers, Tim Armstrong, said that the incident took place in Russia, and involved a mobile app called Jimm. Instead of downloading the app, the code contained malware that fired off a series of expensive SMS messages ($6 each), racking up unwanted charges.
You may have seen these premium text numbers. They are usually four or five digits, and are often required in schemes that offer something like a ringtone or a series of "Yo Mama" jokes in return. They operate similarly to 900 numbers, and your wireless bill contains the charges, which go directly to some commercial enterprise. Apparently these numbers are difficult to set up in the US, but malicious coders will soon be able to set up global premium numbers in other parts of the world.
Armstrong also notes that QR codes could be used for phishing scams. Say you scan a code and it launches an app that asks you for your Google or Facebook password. As an increasing number of apps are integrated with various social networks, some may unsuspectingly enter their info. Oops.
There shouldn't be any reason to stop using QR codes at this point, though. Armstrong notes that there is an intermediate step in between scanning the code and having something naughty happen to you. Namely, it would need to launch an application or take you to a suspicious website. He also cautions against an app like a game that requests access to SMS on Android.
Feel free to scan the code below for more info:
More at SecureList, via Mashable
More in Mobile
5 Upcoming Android Phones That Are Worth Waiting For
05.13.2018 :: 10:00AM EST :: Daniel Starkey
Google's Duplex Hints at a Dark Future for AI
Livestream Samsung's Galaxy Note 8 Unveiling
Pre-Order Andy Rubin's Essential Phone From Sprint
Samsung Teases 'Bigger' Galaxy Note 8