QR Code Phishing And How To Detect It

Abstract

The objective of the project is to help people reduce QR Code phishing problem in two ways: The first way, preventing social engineering attacks involves a combination of awareness, education, and implementing security measures. By deploying 2 camps to spread malicious QR codes in 2 forms offline (posting flyers containing malicious QR codes in public places) and online (sending fake emails containing malicious QR codes) to determine the impact of fake attacks in practice. At the same time, through 2 fake attacks, education was conducted to raise individuals' awareness of security. The second way, building an extension, is essentially a tool to check the URL that the QR code navigates to analyze and report some vulnerabilities and risks that may appear before users’ access to the link. After that, we tested the feasibility of the tool by testing on the previously collected list of URLs, then divided into 2 groups of links: group 1 contains malicious links and group 2 contains safe links, then calculating the accuracy when scanning.