Is that QR code a trap? How to spot quishing scams before it's too late - ZDNET

Our gifting experts are obsessively searching for holiday gifts that are unique, thoughtful and suitable for any budget. A QR code phishing scheme can take many forms. Here's how to recognize them and avoid becoming a victim. Follow ZDNET: Add us as a preferred source on Google. Ever had a QR code land in your inbox and curiosity get the better of you? When we think of phishing and scams, many of the oldest tricks are those we still encounter daily — emails claiming we have long-lost relatives who’ve left us an inheritance; ‘Facebook’ warning that our accounts will be frozen unless we reply promptly; fake lottery wins; and unwanted solicitations from so-called investors willing to transfer us millions of dollars. Also: Mobile phishing is a bigger threat than email now However, times are changing. Recruitment scams are becoming sophisticated enough to convince job seekers to engage; AI is being used to humanize and improve phishing attempts and even automate entire attack chains; and now, an attack vector is emerging that weaponizes QR codes to bypass multi-factor authentication (MFA), steal our data, and hijack our accounts. Quishing, or QR code-based phishing, embeds malicious lin