#quishing — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #quishing, aggregated by home.social.
-
Parken mit WERO in Kassel
"Als erste deutsche Stadt überhaupt integriert Kassel die neue europäische Bezahllösung Wero in ihre Parkinfrastruktur."
Die über 360 Automaten zeigen zum Bezahlen einen individuellen QR-Code auf dem Bildschirm an.
"Schutz vor „Quishing“: Da der QR-Code auf einem Display erscheint und für jeden Bezahlvorgang individuell erzeugt wird, ist Betrug durch überklebte oder manipulierte statische QR-Codes nahezu ausgeschlossen."
Durch den Einsatz von WERO entfällt der Download einer Park-App oder eine Registrierung.
"Im Vergleich zu klassischen Kreditkartenanbietern oder anderen internationalen Digital-Wallets ist Wero auch wirtschaftlich äußerst attraktiv für Betreiber."
🌐 https://www.hectronic.com/int/news-events/news/payment-premiere-in-kassel
#wero #parken #payment #kassel #qrcode #parkraumbewirtschaftung #quishing #parkinfrastruktur #hectronic #bezahlen #zahlungsverkehr #ecommerce #cashless #bargeldlos #digipay #mobilepayment #digitalpayment #epi #weropay #wero_pay
-
WhatsApp, Japan, and a 500% Traffic Spike! 💹 🚨
To be honest, we thought threat actors were tripping when we saw a new WhatsApp phishing campaign targeting Japanese citizens. Don't they know LINE is the app in Japan? Well, we were surprised because this campaign is actually working…
The campaign doesn't only impersonate WhatsApp through its phishing page, but also through the lookalike domains it uses. Around 2k "WhatsApp" domain name variations are involved. The actor also leverages RDGAs – mostly for subdomains. Domains like web-rka-whatsapp[.]com[.]cn have up to 32 RDGA subdomains!
Upon visiting one of these lookalike domains, the user is fingerprinted and only forwarded to the phishing page if they match the intended profile — otherwise they get redirected to sites like bing[.]com or microsoft[.]com. As we show at the image below (with an AI-translated version), the malicious landing page simulates the WhatsApp login screen and encourages victims to scan a malicious QR code with their phone to log in.
When we found the cluster, we genuinely didn't think this campaign would land in Japan — but we were wrong. In the last 6 months, traffic to these domains has increased more than 500%, and it continues to rise.
What impact would these top quality lookalikes have if the campaigns were directed at countries where WhatsApp is actually the preferred messaging app?
Domain sample:
whatsappweb[.]net
whatapapp[.]com
whatsptapp[.]com
leropaxi-whatsapp[.]com[.]cn#dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #Phishing #Quishing #WhatsApp #LINE #Japan #脅威情報 #フィッシング詐欺 #QRコード詐欺 #DNSセキュリティ #Infoblox脅威情報 #WhatsApp #LINEセキュリティ #日本 #サイバーセキュリティ
-
Quishing #Scams: How To Prevent #QRCode Attacks in Your #SMB
#cybersecurity #phishingprevention #quishing
Did you know #QRcodes are now one of the most common sources of #cyberscams?
