Scan QR code can give access to all content on phone including financial?

Forums › Mobile handsets › Scan QR code can give access to all content on phone including financial?

rugrat

3142 posts

Uber Geek
+1 received by user: 945

Lifetime subscriber

#316212 25-Sep-2024 23:00

https://www.nzherald.co.nz/bay-of-plenty-times/news/parcel-scam-lands-in-tauranga/KZNEVWPQZNHK5IQYQOFWOTDDFA/

“The QR code allows the offenders to then access any and all data on your phone or device you used to scan the code, including financial information such as your bank account login details, and personal data,” a police spokesperson said.

“Police are urging anyone who receives one of these gifts not to scan the QR code; the gift can either be kept or discarded, but do not scan the QR code.”

Surely someone needs to do some sort of interaction with where the link opened to, or is it really this dangerous to scan a QR code?

This is a filtered page: currently showing replies marked as answers. Click here to see full discussion.

freitasm

BDFL - Memuneh
80682 posts

Uber Geek
+1 received by user: 41135

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3286455 26-Sep-2024 06:45

I think this is another urban legend.

People have been receiving mysterious packages for years, mainly as a way for small retailers to get some positive reviews on sites like Amazon.

The next step to "takeover and own your life" seems like those old urban legends about DnD being satanic rituals.

None of those stories so far have actually shown any evidence about the "takeover".

Unfortunately, police forces around the world sometimes help spread these things.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

Oblivian

7347 posts

Uber Geek
+1 received by user: 2117

ID Verified

#3286462 26-Sep-2024 07:26

I shut down a hunch of social media sharers of that when I saw it.

Nearly exact copy past from a list of super helpful police regions in the US. Or not as the case may be.

But when you query all the reputable tech/cyber pages for details on a one click payload. Nada. It seems it can't.

There seems to need.to be at least a web URL clicked, and likely details entered into a phish site with it. But no way to trigger the OS into anything.

We know how a QR is constructed with headers to trigger.

The Australian example was a fake ring. And a review webpage URL wanting personal details.