Like using QR codes? Maybe think again. It is as bad, or maybe worse, than clicking on an unverified link in an email.

“Cybercriminals tamper with both digital and physical QR codes to replace legitimate codes with malicious codes. A victim scans what they think to be a legitimate code but the tampered code directs victims to a malicious site, which prompts them to enter login and financial information. Access to this victim information gives the cybercriminal the ability to potentially steal funds through victim accounts.”

See the FBI Public Service Announcement at https://www.ic3.gov/Media/Y2022/PSA220118 for more information.