QR codes Archives - Recon Bee

Traffic violation scams switch to QR codes in new phishing texts

6Apr

By RBNo Comments

News

Traffic violation scams switch to QR codes in new phishing texts

Throughout the United States, scammers are posing as state courts and sending fictitious "Notice of Default" traffic violation text messages, pressuring users to scan a QR code that directs them to a phishing website that demands a $6.99 payment while stealing personal and financial information. This is a fresh take on the popular toll violation and unpaid parking ticket frauds that consumers were sent in 2025 under the guise of state toll authorities. This current campaign began a few weeks ago when someone shared a text with BleepingComputer that was directed to current Yorkers. Numerous people reported identical texts online for other places, such as California, North Carolina, Illinois, Virginia, Texas, Connecticut, and New Jersey. This updated version features an image of a ...

Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social Engineering

Since early October 2024, the threat actors connected to the Black Basta ransomware have been seen altering their social engineering strategies and disseminating a new set of payloads, including Zbot and DarkGate. The threat actor will email bomb users in the target environment, which is typically accomplished by concurrently adding the user's email to multiple mailing lists, according to Rapid7. The threat actor will contact the affected users following the email bomb. As was noted back in August, the attackers initially communicate with potential targets on Microsoft Teams by posing as the company's IT or support staff. In several cases, they have also been seen posing as IT employees of the targeted company read more about Black Basta Ransomware Evolves with Email Bombing QR Code...

QR codes bypass browser isolation for malicious C2 communication

Mandiant has discovered a brand-new way to use QR codes for command-and-control functions while avoiding browser isolation technologies. An increasingly used security technique is browser isolation, which redirects all local web browser requests through distant web browsers housed on virtual machines or cloud environments. Instead of using the local browser, the remote browser runs any scripts or content on the visited webpage. The local browser that performed the initial request then receives the rendered pixel stream of the page, which just shows the page's appearance and shields the local device from any harmful code read more about QR codes bypass browser isolation for malicious C2 communication Get up to date on the latest cybersecurity news and enhance your k...