Cybercriminals are sending emails with QR codes that lead to fake Google Forms, tricking users into entering their login credentials.
In this week’s scam, cybercriminals are stealing students’ and teachers’ login information through phishing emails. You receive an email with an attachment containing a QR code. In the email, you are instructed to scan the code to update your contact information, check your benefits, or apply for opportunities at your university. Scanning this code with your mobile device leads you to a Google Form, which asks you to complete it by entering your email address, password, and other sensitive data.
The email seems convincing because Google Forms are often used in educational settings. However, this form is fake. If you enter any data in the form, cybercriminals steal it to access your online accounts. You won’t have updated your email address, applied for a job opportunity, or checked your benefits. Instead, the cybercriminals have stolen your personal information!
Follow these tips to avoid falling victim to a phishing scam:
- Be suspicious of QR codes in attachments, as they may lead to malicious links that steal your information.
- Never open attachments you aren’t expecting. Use your organization’s official web portal to check the status of your benefits, update information, or perform other tasks.
- While this scam targets students and teachers, remember that cybercriminals can use similar tactics to target anyone. You should always be wary before entering your personal information or password online.
Stop, Look, and Think. Don’t be fooled.
KnowBe4 is the world’s most popular integrated platform for awareness training combined with simulated phishing attacks. Let Keller Schroeder show you how KnowBe4 has helped thousands of organizations just like yours manage the continuing problem of social engineering. Contact us today to learn more.
DISCLAIMER : Any non-technical views expressed are not necessarily those of Keller Schroeder or its employee-owners.
