#quishing — Public Fediverse posts

Parken mit WERO in Kassel

"Als erste deutsche Stadt überhaupt integriert Kassel die neue europäische Bezahllösung Wero in ihre Parkinfrastruktur."

Die über 360 Automaten zeigen zum Bezahlen einen individuellen QR-Code auf dem Bildschirm an.

"Schutz vor „Quishing“: Da der QR-Code auf einem Display erscheint und für jeden Bezahlvorgang individuell erzeugt wird, ist Betrug durch überklebte oder manipulierte statische QR-Codes nahezu ausgeschlossen."

Durch den Einsatz von WERO entfällt der Download einer Park-App oder eine Registrierung.

"Im Vergleich zu klassischen Kreditkartenanbietern oder anderen internationalen Digital-Wallets ist Wero auch wirtschaftlich äußerst attraktiv für Betreiber."

🌐 https://www.hectronic.com/int/news-events/news/payment-premiere-in-kassel

#wero #parken #payment #kassel #qrcode #parkraumbewirtschaftung #quishing #parkinfrastruktur #hectronic #bezahlen #zahlungsverkehr #ecommerce #cashless #bargeldlos #digipay #mobilepayment #digitalpayment #epi #weropay #wero_pay

📱Smishing Slows, Quishing Quickens 🎣

Sick of smishing and those pesky parking/toll texts? Don’t get caught by crafty, counterfeit court QR codes — it’s a scan-and-scam! 💳 🚨

North American cell phone users are being hit with yet another wave of smishing campaigns that now include quishing elements. Likely orchestrated by Chinese-speaking threat actors, this latest campaign builds on previous vehicular violations, evolving tactics while impersonating US courts. 🧑‍⚖️

We’ve recently seen a flurry of SMS messages pushing parking violations — but with a twist: face justice in court… or scan and pay instead!

Delivered as an official-looking image, the actor has begun integrating QR codes into these lures to help mask suspicious phishing URLs, baiting victims into entering personal information, credentials, and ultimately making payments.

For some, this lure may sound better than facing justice for their perceived poor parking. Victims who don't comply are warned that failure to appear or pay could have serious repercussions - a scare tactic designed to push you toward a hasty decision and scanning the QR code! 🫣

We uncovered thousands of these nefarious domains, through their use of Registered Domain Generation Algorithms (RDGAs) and local government impersonation, hosted across a diverse range of hosting providers to evade takedown.

Recent examples:
⛔ ahfgx[.]icu
⛔ euoyq[.]icu
⛔ htpze[.]icu
⛔ mwlaj[.]icu

Friendly reminder - courts don't usually communicate with you via text. That said, we suspect this actor will continue to evolve, expanding their global reach and diversifying lures while improving tradecraft used in smishing and quishing delivery. As for us, we'll take our chances on evading that bench warrant and running from the law. 🏃‍♂️‍➡️

#dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #phishing #smishing #quishing

You ever just need something and its not really a thing... Sometimes you have to build it. And Sometimes it fun to share!

If you are into Cyber Security Awareness or run any kind of training. Check out https://eventscan.link for all your QR Phishing test needs! Free to use and fun to use!

I will happily take feed back here about the site.

#CybersecurityEducation #cybersecurity #QRcode #quishing #phishing
#cybersecuritymonth