[News Terms] Even Just Taking Photos with Camera Apps... 'Qusing' Targeting Youth

Beware of Fraudulent QR Codes on Shared Bicycles and Kickboards
Hard to Verify QR Code Authenticity Visually
Avoid Scanning QR Codes from Unclear Sources

The government recently warned of an increase in Qshing crimes targeting teenagers who frequently use QR codes to rent shared bicycles or kickboards. On the 23rd, the Ministry of Science and ICT, Ministry of Education, Ministry of Gender Equality and Family, Personal Information Protection Commission, and the National Police Agency announced concerns about Qshing scam damages targeting elementary, middle, and high school students and pledged to strengthen prevention activities.

Qshing is a coined term combining "QR code" and "phishing," which means fishing for private data. In other words, it refers to a financial scam method where mobile device users are tricked into installing malicious applications through QR codes, leading to the theft of personal information or inducing small payments.

Shared Kickboard QR Code [Photo by National Police Agency Blog]

QR codes allow users to access various online services without entering internet addresses or installing separate apps. Thanks to this convenient feature, QR codes are widely used among teenagers as a means to rent shared kickboards and bicycles, as well as for mobile coupons, store information, book information, and various other forms, making them a common transaction method and information medium.

As traditional phishing methods like voice phishing and smishing have become widely known among smartphone and mobile device users, new methods have emerged that distribute malware or steal personal information via QR codes. When a malicious app is installed through Qshing, personal information stored on smartphones or other devices can be stolen. Additionally, smartphones can be remotely controlled to cause damages such as voice phishing, bodycam phishing, and illegal sale of personal information.

According to the National Police Agency, the number of phishing crimes is on the rise. Phishing crimes, including Qshing, occurred 1,519 times in 2020, 2,731 times in 2021, and 3,028 times in 2022. Fraud cases have also been reported overseas. In the United States, China, and Spain, damages have occurred through fake parking violation tickets or fake QR codes attached to public bicycles, including QR codes.

[Photo by Ministry of Science and ICT]

It is difficult to visually distinguish the authenticity of QR codes. According to a 2021 survey by global IT security company Ivanti, conducted among 4,157 consumers in six countries including the United States, the United Kingdom, France, Germany, China, and Japan, only 39% of respondents could identify malicious QR codes. Additionally, 49% of respondents said that security features were either not installed on their mobile devices or they did not know if such features were installed. Therefore, even teenagers familiar with information technology (IT) can easily be deceived and should exercise caution.

According to the "Qshing Scam Prevention Guidelines" announced by the Korea Internet & Security Agency (KISA) and others, first, QR codes from unclear sources should not be scanned. Also, check whether the QR code is not a sticker attached on top of another QR code, and double-check if the URL linked after scanning the QR code is correct. Do not enter personal information or install suspicious apps after accessing a QR code. Furthermore, install mobile security apps and smishing detection apps and keep them updated to the latest versions.

If Qshing damage is suspected, immediately switch the smartphone to airplane mode to block communication and delete malicious apps using a mobile antivirus. If financial information leakage is suspected, visit the branch of the financial institution you use or call their call center to request a blanket payment stop on your account to minimize damage. Additionally, if you find a suspicious QR code or suspect malicious app infection, report it to the "Fraud Call Keeper (National Police Agency & Financial Supervisory Service)" or contact the 118 Counseling Center (KISA) without an area code for free 24-hour consultation.

This content was produced with the assistance of AI translation services.