Can you get malware on your phone scanning QR code?

[jerry0]

So I know lot of places have you scan a QR code to visit a site and things like that.  I believe they do that with restaurants as well or not?


Now when you scan a QR code with your phone, is it possible to get malware on your iphone just from scanning it?  I am not that familiar with QR codes but I believe once you bring your camera to it, it automatically goes to that website without you clicking take a picture or not?


If you have a crypto wallet on your phone, can you get malware this way?  Now if it's a popular store or place, then chances are almost none?  But could a hacker change that QR code to malware somehow even if it directs you to the correct site?

[1714749068]

1714749068

[1714749068]

1714749068

[1714749068]

1714749068

[1714749068]

1714749068

[1714749068]

1714749068

[BitMaxz]

I think what you think is possible I can generate a QR code with different links but redirect them to different sites.

Sample you made a site and adding HTML redirect to the site of your choice under headings and then generate the QR code of your site that you can share with anyone if someone scans the QR code they will redirect to a different site.
You can add malware to your site to infect the users who access your site.

So be careful to scan any QR code make sure to use antivirus to scan the QR code or use the QR Kaspersky scanner or just download the Kaspersky app it has a feature to scan the QR code.

[Myleschetty]

You can not get malware through QR code.

QR code also help against clipboard malware because there is nothing to copy to clipboard.

But if you are using QR code for payment, always check and recheck the payment address to make sure that you are sending coins to the right address. It is good to always still assume that hack can happen.

There's a possibility of getting Malware on phone through QR code scanning if the link provided after the code scanning is coded in a way that will redirect users to websites or links that are malicious.
I think we just need to take extra caution when dealing with online activities because technology is advancing every day and online theft is implementing new strategies.

[OcTradism]

There are some threats from QR code and when you are on Internet, you have to practice a general rule, don't be too curious and want to explore every new things you see. If you do this, your curiosity will put you and your devices at bigger risk.

How cybercriminals mask QR codes

If you are worrying about it, with the question in OP, you seem to be careful enough and it is a prevention for potential cyber security issues.

[Husna QA]

-snip-
Now when you scan a QR code with your phone, is it possible to get malware on your iphone just from scanning it?  I am not that familiar with QR codes but I believe once you bring your camera to it, it automatically goes to that website without you clicking take a picture or not?

If you have a crypto wallet on your phone, can you get malware this way?  Now if it's a popular store or place, then chances are almost none?  But could a hacker change that QR code to malware somehow even if it directs you to the correct site?

I read from several sources, including antivirus provider blogs. In general, QR codes themselves are safe because they have no intrinsic security risks; This means that when you scan it, your device will not immediately be exposed to viruses or malware.

The risk of getting a virus or malware is when you carry out a further process by clicking on a link obtained through a barcode scan, which could have been manipulated by scammers, for example, in the form of a link containing malware which is automatically downloaded or installed when you click on the link.

But first, are QR codes safe? In short, yes. QR’s themselves are safe as they don’t have any intrinsic security risks. However, other elements involved in the use of QR codes, such as mobile devices do. Although unlikely, there are several ways that cybercriminals can utilise QR codes to access private data. As such, it’s important to be aware that mobile devices are still at risk when they scan a QR code and there are several ways attackers can use QR codes as a ploy.

While QR codes are generally safe, they can be manipulated by scammers because they all appear similar. A malicious QR code may lead you to a spoofed website designed to drop different malware types or steal your sensitive data, like your login credentials, credit card information, or money. In one incident, scammers were using fake parking meter QR codes to steal money through phishing websites.

Reference:
- https://www.eset.com/za/about/newsroom/press-releases-za/blog/best-practices-when-scanning-and-using-qr-codes/
- https://www.malwarebytes.com/cybersecurity/basics/what-is-a-qr-code

[mk4]

I don't think a QR code in itself can execute code or open/download links — you'll need to do the action yourself after scanning the QR code. Scanning a QR code is like typing in a website URL on your browser without pressing the 'enter' button yet.

[Charles-Tim]

There's a possibility of getting Malware on phone through QR code scanning if the link provided after the code scanning is coded in a way that will redirect users to websites or links that are malicious.
I think we just need to take extra caution when dealing with online activities because technology is advancing every day and online theft is implementing new strategies.

You are correct. But no link is altered through the QR code, but a link is altered by itself before generating the QR code which is a link to download malware. QR code itself is safe. About taking extra caution, anything you paste with QR code, you have to check and recheck that thing, making sure it is correct before proceeding.

[NotATether]

You can not get malware through QR code.

This is a bit misleading, because if the QR code contains a link to a malicious website, and your phone is configured to automatically open the website after your scan the code, then you will instantly get infected if the malware is able to work on your device. So we must be careful about what we scan and make sure we can view the full URL (or at least the protocol and website if applicable).

[dzungmobile]

This is a bit misleading, because if the QR code contains a link to a malicious website, and your phone is configured to automatically open the website after your scan the code, then you will instantly get infected if the malware is able to work on your device. So we must be careful about what we scan and make sure we can view the full URL (or at least the protocol and website if applicable).

Consider QR code is a gate to open something. If click on it, you will be direct to a potential threat, it is risky and I would like to avoid it.

If I am directed to a phishing website, will I lose my money?
Yes or No, it depends on what I will do on that website but prevention is better than cure. If I can avoid potential threats at a first step, I will prioritize it than jumping into a hold and try to do my research to escape from it.

[tech30338]

it needs to be auto-executable once you have scanned the QRcode, but the question is can you get yes, once redirected to the link being attached to the QR if you have accidentally clicked it, then its game over, especially if you are using phone that you never updated once they are available, that is why phone have updates since they need to fix the bugs and issues that may cause hackers to use those holes to get in to your phone.

[Pandu Geddon]

Consider QR code is a gate to open something. If click on it, you will be direct to a potential threat, it is risky and I would like to avoid it.

If I am directed to a phishing website, will I lose my money?
Yes or No, it depends on what I will do on that website but prevention is better than cure. If I can avoid potential threats at a first step, I will prioritize it than jumping into a hold and try to do my research to escape from it.

usually, the QR code will display the URL first before we agree to continue to the web destination. perhaps some devices are set to log in automatically after scanning the code.
but if there is no contact with the phishing website such as transaction approval or wallet exchange, I don't think it will be a problem.
To avoid this, we should not carelessly connect our devices with just any QR code scan. or if we access our wallet via smartphone, maybe we can use it separately from the device we use for social activities.

[nakamura12]

It is possible to get malware on your phone through scanning the QR code. Having QR code doesn't do anything at all because it is all about what's in that code and when you scan it. If you don't want to use your phone right away and there are places where you can use computers after you pay then you should scan it using it. Wondering how you will scan the code?. There are free online QR code scanner either by camera or by uploading the QR code. I have tried it myself when I am not sure what's in the QR code or I am curious on what is in the QR code and also doing it just to be sure that it is safe. As what post above mentioned about generating QR Codes is possible and there are also websites that you can use to generate QR Code and not just for scanning the code.

[Husires]

QR code is the same method of displaying words, but it is in a square form that the scanner can understand quickly, and it may contain within it a link to reliable URLs, phishing links, images, words, or malware. Therefore, modify the settings so that the links do not open automatically, or that you manually verify the content before Copy it, open it in the browser, or download it, then you will be safe.

[Crypt0Gore]

Don't go-around scanning everything you see only, this is something I saw my little nephew doing with their smartphone,   only kids should be doing such thing.

If you want to scan QRCode is should be from maybe exchange or another crypto wallet you plan to send some coins into, also I don't think you will automatically lose your funds, you still have to open the link and proceed with something that will give the scammers access to your fund.

You are the only one that can still give access to scammers in your wallet, so just make sure you know what you are doing, QR code should come from trusted sources, like centralized exchange or when processing some payments.

[cryptoaddictchie]

Yes but probably not indirectly right? This qr code is a shprt cut to somewhere maybe a link or anything which if those path contain malware or malicious threat and you continue then thats the only time youll be in potential danger to steal and hack. But that depends on how you click it. Maybe be aware on scanning QR codes or only to those establishment known as harmless. If you see a new one maybe just dont do that.

[Swedish farmer]

I ONLY use "old" 2G GSM and 3G UMTS mobile phones which means I DO NOT USE "smart phones" which means that I am 100% safe from malwares, viruses etc etc etc...

*happy me*   

[CRAIC]

So I know lot of places have you scan a QR code to visit a site and things like that.  I believe they do that with restaurants as well or not?


Now when you scan a QR code with your phone, is it possible to get malware on your iphone just from scanning it?  I am not that familiar with QR codes but I believe once you bring your camera to it, it automatically goes to that website without you clicking take a picture or not?


If you have a crypto wallet on your phone, can you get malware this way?  Now if it's a popular store or place, then chances are almost none?  But could a hacker change that QR code to malware somehow even if it directs you to the correct site?

Of course not. QR scanning is an offline procedure

[boyptc]

Possible.

Like someone is giving you a direct link to the download button. So when being scanned by the QR scanner, it can directly make you download the file that contains malware.

So, don't just keep on scanning QR codes out of curiosity.

[jerry0]

Well don't restaurants and stores have to scan the QR code to choose food or to pay?


If so, wouldn't that mean someone could manipulate the QR code or something like that?


Imagine it's a place where they require people to scan the QR and it's a public place.  Can someone do something with that code though?

[Dr.Bitcoin_Strange]

Can you get malware on your phone scanning QR code?

Yes, it can, because, for example, if my website is coded to a QR code, and perhaps, let's say, the site is a malicious site that only requires you to open the site on your phone, your phone will get infected. That means that if you scan the QR code and are directed to my site, you can get infected because I only require you to open the site on your phone. It's as simple as that. In other words, you can also have a QR code to scan before you can download a file, and if that file is the malware itself, that means scanning the code that automatically downloads the file means you are also infected.