As Black Friday approaches, shoppers eagerly await discounts while scammers are focusing on a different target. Cybercriminals are taking advantage of the surge in package deliveries to perpetrate dangerous scams right at people’s doorsteps. Recent reports have highlighted a rise in “quishing,” where phishing attacks are concealed within QR codes, a tactic that is now being combined with a revived brushing scam ahead of Black Friday.
Expert Theodore Ullrich from Tomorrow Lab notes a concerning escalation in these scams as consumers anticipate their deliveries. He emphasizes that the moment a recipient trusts an unexpected package with their name on it is when fraudsters strike by luring victims to scan QR codes leading to phishing pages.
Ullrich warns about the ease with which individuals can fall victim to these scams, as scanning a QR code on a package seems routine but can quickly lead to personal and financial data theft. This modern twist on brushing scams has evolved into a more calculated scheme, with attackers using QR codes to direct victims to phishing sites for monetary gain.
Highlighting the accessibility of personal information online, Ullrich cautions that scammers can easily make fraudulent parcels appear authentic by leveraging stolen data. He stresses the importance of vigilance, urging recipients to verify unexpected packages directly with the company and to be cautious when scanning QR codes, as even the most convincing fake websites can swiftly compromise sensitive information.
With Black Friday providing cover for scammers amidst the flurry of online orders and deliveries, Ullrich urges people to remain alert and take necessary precautions. He advises individuals to change passwords, enable two-factor authentication, monitor transactions, and treat every QR code with suspicion to avoid falling prey to these increasingly sophisticated scams.
In conclusion, staying calm, questioning unexpected deliveries, refraining from scanning unknown QR codes, and promptly addressing any suspicions are key strategies to thwart scammers’ attempts to exploit the holiday season.