Security News > 2021 > April > Anti-Vaxxer Hijacks QR Codes at COVID-19 Check-In Sites

Quick-response codes used by a COVID-19 contact-tracing program were hijacked by a man who simply slapped up scam QR codes on top to redirect users to an anti-vaccination website, according to local police.

Fake QR codes were placed over genuine COVID safe check-ins and once scanned, it is understood it led people to a website with information against vaccinations.

Law enforcement added an additional warning to would-be QR code scammers: "Any person found to be tampering or obstructing with business QR codes will likely face arrest and court penalty of up to $10,000."

QR codes have become a quick, contactless way to read menus, check into appointments and more since the start of the COVID-19 pandemic.

"Hackers have been known to create adhesive labels with malicious QR codes and paste them over legitimate QR codes, allowing them to intercept or sit in the middle of transactions and capture payment information," Harrod said.

The Army recommended users avoid scanning random QR codes, be extremely cautious about entering any credentials after scanning and suggests if a QR code appears to be applied on top of another, ask about its legitimacy.

News URL

https://threatpost.com/anti-vaxxer-hijacks-qr-codes-covid19/165701/