WhatsApp and QR codes are the next scam frontier

WhatsApp and QR code abuse will be the next frontier for scam threats, according to security awareness training and simulated phishing platform provider Knowbe4.

The company has detected a spike in SMS phishing attacks over the past 12 months, according to Knowbe4 APAC Security Awareness Advocate Jacqueline Jayne.

“Scammers [were] really leveraging fake delivery SMSs, in particular, while we struggled through extended lockdowns last year. Now we’re seeing these attacks move onto the WhatsApp platform so we’re urging everyone to be extra vigilant,” she said.

The spike in QR code adoption and use due to check-in requirements and the adoption of paperless menus has also opened up a new threat vector for cybercriminals, Jayne said.

“Recently we have seen fake QR codes stuck to parking meters, enticing unwitting drivers to scan the code and hand over their payment details believing they were paying for parking, whereas they were actually handing over their payment information to criminals,” she said.

Scams in Europe last year took advantage of malicious WhatsApp ads which offer a $250 coupon for a well-known retailer, in exchange for a short survey. Knowbe4 is warning to expect similar attacks in Asia-Pacific soon.

“A similar strain installs a malware on the phone, which looks like a software update but steals all the contacts, phone numbers and email addresses — and, if they can find any, passwords and banking credentials,” Jayne said.

“Users of WhatsApp and similar messaging services are more likely to view messages as trustworthy, since they appear to be coming from an acquaintance.”

Image credit: ©stock.adobe.com/au/PixieMe