A NEW PHISH JUST DROPPED!

So today while I was checking my personal e-mail I came across this one e-mail in particular that was all in Japanese, I was just going to dismiss it as spam, as it most likely is but I noticed a QR code.

Just yesterday NZ Police were warning about QR codes being left in "surprise" packages and when you scan them to find out who sent them. Except what really happened is that the QR code was malicious, and all your financial data is stolen from your phone.

So now we have a cool new hybrid, a spam email with a QR code

The QR code drops you here:

hxxps://translate(.)google(.)com/translate?sl=auto&tl=ja&hl=ja&u=hxxps://blue-mouse-4eb8.yohhzgs(.)workers(.)dev/&client=webapp

Then the redirect sends you here:

hxxps://8gbtrhtrh(.)duckdns(.)org/app/signin/openid/pape/error

Duck DNS is a free dynamic DNS service that allows users to push domain names to any IP so as static IPs get blocked the names can be moved around,

So let your users be aware of this.

As always it is probably best not to just trust any QR code form an unverified source.

Stay safe out there.