QR Code Scam

Mobile banking is actually safer than banking on your computer or laptop. Assuming you use some common sense, like using your financial institutions app and don't "bank" on public wifi. If out of the house, use cellular data

 

This could be true, but I think both are still very susceptible. You just need to be extra safe

 

What do you use to convert PDF files?

 

From pdf to something or from something to pdf?

you can do a picture for free on adobe.

JPG to PDF: Convert JPG images to PDF for free | Adobe Acrobat

 

I've never figured out how to "scan" them, so I'm good. Old age has a few advantages.

What's PDF - "pretty damn funny"?

 

I used online services to convert PDF files. But most of them were bad at recognizing text in photos. Each time I checked and added text where needed. I also tried different mobile apps. You might know CamScanner.

 

Yeah and the stupid beer list is never current.

 

Scammers.. They are EVERYWHERE.

You mean to tell me, that a poster's first post is asking about PDF software on a thread about QR codes...

Then a second first-time poster, with the same username format as the other person, recommends software by name that no one has ever heard of.

Nah, bro.

 

Would you look at that. A Chinese app known to contain malware.

You Should Delete CamScanner : Here's Why and The Best Alternatives | Digital Trends.

I calls 'em as I sees 'em.

 

LMAO, good catch. First post and they resurrected a thread from December?

 

If you have an iPhone there is no need for a third party app to create a .pdf in a lot of cases. The native Notes app will take a picture/s and turn it into a .pdf you can share or save. It will also scan the text if you want to save on typing. I don’t think it will turn a photo on your device into a .pdf but I’m not sure the advantage to doing that anyway.

 

Nice. When I need to make something a PDF, I just use Windows built-in Print to PDF. Should be available in the drop down of available printers when you go to print something. I've never tested OCR with it. I doubt it has that feature, but I don't really need it.

 

People need to relax. An IOS device like an iPhone has each app sandboxed so it can’t affect any other app, and your iPhone is the safest device you can use. The only way any malware can get on your phone is if you put it there through carelessness, downloading apps that aren’t from the App Store, using a jail broke phone, or not keeping your iPhone up to date.

These QR code scams are no different than any other phishing email you get. Nothing will happen to an iPhone by simply scanning it, but like any other phishing email you need to be wary of clicking any links, or providing any personal information. Just back out of it and no harm will be done.

I’m just talking about iPhones, so if you’re an android user then you probably need to use a lot more caution.

 

The 2023 Inspector Clouseau Award goes to you my friend... some good work there.

 

Some if this is just not true.

Zero days exist and can target existing apps, on up to date phones, including iPhones. You could be sent a text message that you don't even have to click on and get spyware installed on your phone. This is how Pegasus worked and most likely is how Jamal Khashoggi was tracked down, and how authotarian regimes spy on journalists and dissidents. Thanks NSO group

 

Apparently it has been addressed and there is little danger to common users.
Update Now: Apple Ships Fixes for Zero-Day Vulnerability in Macs, iPhones, iPads

 

That's the point of zero days. They aren't fixed until they are. I agree that iOS is safer than Android, but thinking that iPhones are impervious is wishful thinking, and even with smart usage, like the things you mentioned, it's no guarantee that your phone isn't compromised. Also, that article isn't related to Pegasus. It has since been patched but before it was patched, 1) it had to be found. 2) Apple had to code a patch for it. 3) Users had to install that patch. If it's a sophisticated exploit, it could exist in the wild for months to years.

I have read about that vulnerability you linked. Since it's a browser vulnerability and a could lead to RCE, remote code execution, you could link that site to a QR code, and users wouldn't know it was a malicious website. If I made fake, but very official looking, high quality Gator pamphlets about some free thing or whatnot, and sprinkled them around BHG Stadium, do you think anyone would scan them? They would.

"BOGO 25 ounce Bud Lights for Gator Nation. Scan here and then present code to your nearest concession stand. Limit 1 code per customer"

I could register a domain and have it host that malicious code, or something similar. I could register GatorRewards[.]com. People will go there, I promise you. This would have worked up until the patch was released.

Besides that little scam, nation-state level attackers try to find these bugs, all day, everyday. We do it. Our allies do it. Our adversaries do it.

On the flipside, your tips were good. Be suspicious of... everything.

 

It’s always good to be safe but I don’t deal in absolutes. To me there’s a difference between what’s possible and what’s probable. Sure it’s possible but not very probable as far as every day citizens go.