-snip-
Now when you scan a QR code with your phone, is it possible to get malware on your iphone just from scanning it? I am not that familiar with QR codes but I believe once you bring your camera to it, it automatically goes to that website without you clicking take a picture or not?
If you have a crypto wallet on your phone, can you get malware this way? Now if it's a popular store or place, then chances are almost none? But could a hacker change that QR code to malware somehow even if it directs you to the correct site?
I read from several sources, including antivirus provider blogs. In general, QR codes themselves are safe because they have no intrinsic security risks; This means that when you scan it, your device will not immediately be exposed to viruses or malware.
The risk of getting a virus or malware is when you carry out a further process by clicking on a link obtained through a barcode scan, which could have been manipulated by scammers, for example, in the form of a link containing malware which is automatically downloaded or installed when you click on the link.
But first, are QR codes safe? In short, yes. QR’s themselves are safe as they don’t have any intrinsic security risks. However, other elements involved in the use of QR codes, such as mobile devices do. Although unlikely, there are several ways that cybercriminals can utilise QR codes to access private data. As such, it’s important to be aware that mobile devices are still at risk when they scan a QR code and there are several ways attackers can use QR codes as a ploy.
While QR codes are generally safe, they can be manipulated by scammers because they all appear similar. A malicious QR code may lead you to a spoofed website designed to drop different
malware types or steal your sensitive data, like your login credentials, credit card information, or money. In one incident, scammers were using
fake parking meter QR codes to steal money through phishing websites.
Reference:
-
https://www.eset.com/za/about/newsroom/press-releases-za/blog/best-practices-when-scanning-and-using-qr-codes/-
https://www.malwarebytes.com/cybersecurity/basics/what-is-a-qr-code