NHW: Phishing, Smishing, Vishing…. And Now Quishing!

Hello everyone,

For the last 70 or so years I’ve always considered that I knew enough words to get by (although some of you might perhaps be thinking too many!) but, in more recent times, new words have appeared that challenge my cerebral dictionary. Leaving aside the ones that seem to have been introduced by youth and/or ethnic culture, others crop up in the more mainstream use of our language and the subject of this message is a case in point. These words all describe different ways that villains out there try to obtain all our personal information using, in order of those funny words in the title, emails, SMS/text messages, voice calls and, the latest one, QR codes.

I have circulated a message before about QR codes popping up as a new source of concern but have received the message below from ActionFraud which shows that this is becoming an increasing issue so let’s all be careful out there!

Although phishing and smishing were both already known to me, I am now shunting vishing and quishing around in my cranial cavities trying to look for somewhere to put them – these days, seem to be running out of space up top!

Thanks,

Michael

A new alert has been issued by Action Fraud, warning about quishing, a form of phishing where a fraudulent QR code is scanned, designed to steal personal and financial information. The warning encourages people to stay vigilant and double check QR codes to see if they are malicious, or have been tampered with, before scanning them online or in public spaces. 

Claire Webb, Acting Director of Action Fraud, said: 

QR codes are becoming increasingly common in everyday life, whether it’s scanning one to pay for parking, or receiving an email asking to verify an online account. However, reporting shows cyber criminals are increasingly using quishing as a way to trick the public out of their personal and financial information. 

We’re urging people to stop and check before scanning QR codes, to avoid becoming a victim of quishing. Look out for QR codes that may have been tampered with in open spaces, or emails and texts that might include rogue codes. If you’re in doubt, contact the organisation directly. You can follow our advice on quishing, on our website at www.actionfraud.police.uk to help protect yourself.”

Action Fraud can reveal that quishing happens most frequently in car parks, with criminals using stickers to tamper with QR codes on parking machines. Quishing also occurred on online shopping platforms, where sellers received a QR code via email to either verify accounts or to receive payment for sold items. Reports also showed phishing attacks were taking place impersonating HMRC, or other UK government schemes, targeting people with QR codes designed to steal personal and financial details. 

What can you do avoid being a victim of quishing?

QR codes used in pubs or restaurants are usually safe to scan. Scanning QR codes in open spaces (like stations and car parks) might pose a greater risk. Check for signs that codes may have been tampered with (usually by a sticker placed over the legitimate QR code).

If in doubt, do not scan them: use a search engine to find the official website or app for the organisation you need to make a payment to.If you receive an email with a QR code in it, and you’re asked to scan it, you should be cautious due to an increase in these types of quishing attacks.

Finally, we recommend that you use the QR-scanner that comes with your phone, rather than using an app downloaded from an app store.

If you receive a suspicious email, report it by forwarding it to phishing@report.gov.uk Find out how to protect yourself from fraud: https://stopthinkfraud.campaign.gov.ukIf you’ve been a victim of fraud, report it at www.actionfraud.police.uk or by calling 0300 123 2040. In Scotland, contact Police Scotland on 101.


Webmaster Says – Did you know?

QR is an abbreviation of Quick Response. A QR code is a type of two-dimensional matrix barcode invented in 1994 by Masahiro Hara of the Japanese company Denso Wave for labelling car parts.  Usually they are in black and white, but can also be in colour or have images inside them.

Who knew?