[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

7 clusters · 14 sources · 40 days · First seen · Last updated

Global rise in QR-code phishing attacks

Overview

In late July 2026, law-enforcement agencies across Europe, North America and Asia warned that the worldwide surge in QR-code phishing—often called “quishing”—had expanded beyond the parking-meter stickers first reported in Zug, Switzerland. Criminals are now swapping legitimate QR stickers on a range of public fixtures, including restaurant tables, ticket machines and information boards, directing users to concealed fraudulent sites that harvest banking credentials and install malware such as Hook v3 and RedHook. By mid-August, security experts warned that these attacks are increasingly “MFA-resilient,” capable of bypassing multi-factor authentication by stealing tokens, initiating malicious downloads, or manipulating Wi-Fi connections. This tactic aims to lure victims from protected desktop environments to private mobile devices where security measures are often less effective. The FBI has specifically identified the North Korean hacker group Kimsuky (APT43) for using QR codes in spearphishing attacks against organizations in the United States, often employing device fingerprinting to steal credentials. Regional vulnerabilities continue to emerge. In Argentina, the rapid adoption of QR payments has created risks, with the BA-CSIRT noting primary danger occurs when users enter sensitive data after scanning. In Spain, the Cybersecurity Agency of Catalonia identified a scam involving unsolicited packages containing QR codes that promise gifts. Additionally, reports from Wales highlight the exploitation of parking meters, where scanning fraudulent codes has led to unauthorized bank withdrawals. Data from Report Fraud indicates a 700% increase in QR code-related scam reports over the last four years. In late August, new tactics were identified in Lithuania. According to data from Tele2, cybersecurity firm Interneto apsauga blocked over 107 million threats in July. Scammers in the region are reportedly presenting QR codes on computer screens under the guise of “robot verification” or video playback requirements. Scanning these codes redirects mobile users to unsafe websites.

Entities

Law enforcement agencies · Interneto apsauga · QR codes · Donato Drakickas · FBI

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. about 12 hours ago

    [TECHNOLOGY] 2 sources
    Cybersecurity threats in Lithuania rise through deceptive QR codes and fake broadcasts

    Cybercriminals are using deceptive tactics like fake QR codes and fraudulent free sports broadcasts to trick users, with over 107 million threats blocked by Interneto apsauga in July.

  2. 4 days ago

    [TECHNOLOGY] 2 sources
    QR code scams rise as fraudulent parking apps target users

    QR code-related scams have increased by 700% in four years, with criminals using fraudulent parking apps to steal money and data from unsuspecting users.

  3. 11 days ago

    [TECHNOLOGY] 2 sources
    Cybersecurity experts warn of rising QR code phishing attacks

    Cybersecurity experts warn of rising 'quishing' attacks, where 11% of phishing emails use malicious QR codes to bypass MFA and target mobile devices, including threats from the Kimsuky hacker group.

  4. 16 days ago

    [TECHNOLOGY] 2 sources
    Cybersecurity agencies warn of rising QR code phishing scams

    Authorities in Argentina and Spain are warning against ‘quishing’ scams, where fraudulent QR codes are used to steal banking data and personal information via fake websites or unsolicited packages.

  5. 26 days ago

    [CRIME] 2 sources
    Travel QR Code Scam Targets Tourists Worldwide

    The “Quishing” travel scam uses fake QR codes at restaurants, parking meters and transit hubs to steal tourists’ data. Pause, check the code and URL, then pay safely.

  6. about 1 month ago

    [CRIME] 2 sources
    Global rise in QR code phishing scams threatens consumers

    Law enforcement across Europe, North America and Asia warn that QR code phishing (“quishing”) is surging, with criminals swapping legitimate QR stickers for malicious ones on parking meters, menus and public QR

  7. about 1 month ago

    [CRIME] 2 sources
    Zug QR-code scams spotlight 146% global rise in quishing attacks

    In Zug, fake QR stickers on parking meters led to fraudulent sites as global QR‑code phishing rose 146%, while banking trojans and a deep‑fake scam in Mumbai stole €11.5 million.

Sources

3cat24.cat · ad-hoc-news.de · agenciasp.sp.gov.br · ahdb.org.uk · arminhanisch.de · borncity.com · contempora.fi · elektronika.lt · it-boltwise.de · opera.org.au · polizeinews.ch · theplanetd.com · todoespolitica.com.ar · utenis.lt

This summary has been updated 5 times: see revision history