Security News > 2022 > February > Stealing Bicycles by Swapping QR Codes
2022-02-21 12:31
They're stealing Citi Bikes by switching the QR scan codes on two bicycles near each other at a docking station, then waiting for an unsuspecting cyclist to try to unlock a bike with his or her smartphone app.
The app doesn't work for the rider but does free up the nearby Citi Bike with the switched code, where a thief is waiting, jumps on the bicycle and rides off.
Presumably they're using camera, printers, and stickers to swap the codes on the bikes.
Presumably the victim is charged for not returning the stolen bicycle.
This story is from last year, but I hadn't seen it before.
News URL
https://www.schneier.com/blog/archives/2022/02/stealing-bicycles-by-swapping-qr-codes.html
Related news
- Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR Codes (source)
- Google binning SMS MFA at last and replacing it with QR codes (source)
- How QR code attacks work and how to protect yourself (source)
- Week in review: How QR code attacks work and how to protect yourself, 10 must-reads for CISOs (source)