Switzerland warns that malicious QR codes are being sent out via snail mail.
The letters claim to be promoting a new weather app from MeteoSwiss - but actually point to a malicious app that steals login credentials.
https://therecord.media/malware-delivered-by-mail-swiss-cyber-agency
@gcluley
That's a new one
@gcluley this is an extremely novel approach. Makes sense, though. Many people trust physical over virtual. Just one more thing to add to security training.
@gcluley I have been mentioning to people in my circle to not use QR codes, just for these reasons. They can't be validated. It's a neat idea, but it today's world its not an option. Just add a website link, type it in. Period.
@gcluley This was always a concern with QR codes, with reports years ago of legitimate ones being covered by fakes leading to lookalike sites.
@gcluley good to know. Cheers.