Hello and welcome once more. This morning I was wondering if an attacker can use QR codes to hack clients and unsuspecting people and I want to look at this from all angles so this post will be updated several times before the end of the day.
So what is a QR code? basically its a Quick Response code for more details on this check out This Post on Wikipedia The first thing I noticed is that since these codes can redirect to a web page, an attacker can use this to make a victim download malicious APK files which can harm their device.
SENDING SMS: That is not the only thing these codes can do, they can be programmed to send emails, send sms, makes calls etc (we will see into that later) which can be a harm. An attacker can draft an SMS enter the recipient number and send the code to a victim (who if not vigilant) can send an SMS which he did not type, a good example is the Picture below which you can scan to prove this. it was crafted by me and it sends and SMS to my direct line through your phone.
