QR Code Safety

You can scan this one. It's safe.

QR codes are everywhere these days—on posters, business cards, and even restaurant tables where they replace physical menus. A few years ago, during a layover at LaGuardia, I stopped to grab a bite. The entire exchange felt impersonal: I scanned a QR code, placed my order, and eventually someone tossed the food my way without much interaction.

​​As reported in The Register, Switzerland's National Cyber Security Centre recently issued a warning about a malware campaign spreading through mailed flyers. These flyers urged recipients to download a "weather alert app" that appeared to be from the country’s Federal Office of Meteorology and Climatology. The flyers instructed users to scan a QR code, which led to a download page for an app called "Alertswiss"—a name deceptively similar to the official "AlertSwiss." However, this app wasn’t available on the Google Play Store but rather on a third-party site.

​​Instead of delivering weather alerts, the app contained a variation of the Coper Trojan malware. This malware can keylog, intercept two-factor authentication messages, capture login credentials, and more. It allows attackers to access bank accounts, steal funds, and launch phishing attacks, enabling further malicious activities.

This incident marked the first time such a scam was reported in Switzerland, but it’s likely a sign of things to come. As long as these scams prove lucrative, they will persist and evolve.
​
To protect yourself, avoid scanning QR codes unless you are confident in their source and authenticity. If in doubt, refrain from using devices connected to sensitive personal information for such scans. Stay cautious and protect your data!