Beware of QR Code Scams: Cybercriminals Are Distributing Malicious Codes via Mail

In a concerning twist on cyberattacks, criminals are using physical letters to deliver malware by enticing recipients to scan QR codes. Switzerland’s National Cyber Security Centre (NCSC) recently issued a warning about fraudulent letters masquerading as official correspondence from the Swiss Federal Office of Meteorology and Climatology (MeteoSwiss).

The Scam: Malware Hidden in a Weather App

These deceptive letters encourage recipients to scan a QR code, claiming it will install a severe weather app on their Android smartphones.

Instead, the QR code links to a malicious app called Coper (also known as Octo2), which can steal sensitive information from over 380 apps, including banking applications.

Cybercriminals can easily rebrand this malware, meaning future attacks may disguise it under different names or purposes unrelated to weather.

Why This Method Works

While distributing malware via physical mail is unusual due to higher costs compared to digital methods, it comes with an advantage: trust. Many people are less suspicious of instructions received through physical mail than they are of links sent via email or SMS.

Additionally, the rise of QR codes in daily life—such as in restaurants or parking lots—has made scanning them a common habit, often without verifying the destination website’s legitimacy.

What to Do if You Receive These Letters

If you’ve already been tricked into downloading the malicious app, take immediate action:

• Reset your smartphone to factory settings.
• Change all login credentials for any potentially compromised accounts.

Staying Safe from Similar Scams

To protect yourself from scams like this:

1. Verify App Sources: Only download apps from official app stores like Google Play or Apple’s App Store.
2. Use Antivirus Software: Install and update antivirus protection on your smartphone.
3. Keep Your Device Updated: Ensure your phone has the latest security patches installed.
4. Double-Check QR Codes: Be cautious when scanning QR codes and verify the source before proceeding.

Let OptfinITy Keep Your Network Secure 

To learn more about how to recognize common threats to your network, contact us at OptfinITy by calling 703-790-0400 or send an email to sales@optfinITy.com today.