2072: CyberArk Biohacker Reveals 3 Ways Any QR Code Can be Spoofed
Tech Talks Daily15 Aug 2022

2072: CyberArk Biohacker Reveals 3 Ways Any QR Code Can be Spoofed

When the pandemic hit, the need to touch as few things as possible to slow the spread of the virus meant QR codes took off quicker than Netflix stock. Now that we as consumers are programmed to scan them without a second thought, we find ourselves in a vulnerable situation. The FBI has even issued a formal warning about faked QR codes.

In his new research, Len Noe, aka 'the Biohacker' and White Hat Hacker at CyberArk, has revealed three ways that any QR code can be spoofed to provide an attack vector. Crucially, Len's research has shown how mobile devices can be taken over and used to provide an attack vector in corporate environments to launch advanced attacks.

Len discusses why we should be wary rather than blindly trusting forms. For example, a fake job ad containing a malicious QR code offers a perfect opportunity to send all that personal sign-up information straight to an attacker, not a prospective employer.

We also discuss the importance of vigilance when installing new apps from a QR code. Len shares how he spoofed the Google Play Store to gain ultimate access to a user's phone – including reading personal messages and taking pictures with the camera. Finally, he shares how even scanning a rogue QR code to order takeout could result in your details getting phished. In one fell swoop, Len had access to a user's phone, leaving their GPS location and sensitive user information open to play with.

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(2000)

Running Enterprise Computer Vision on CPUs With Ultralytics YOLO26

Running Enterprise Computer Vision on CPUs With Ultralytics YOLO26

What becomes possible when enterprise computer vision no longer depends on expensive GPU infrastructure? In this episode of Tech Talks Daily, I speak with Glenn Jocher, founder and CEO of Ultralytics,...

29 Jul 25min

How Equifax Connects AI Data and Human Support in Government Services

How Equifax Connects AI Data and Human Support in Government Services

What can private companies learn from government caseworkers about adopting automation and using data more effectively? In this episode of Tech Talks Daily, I speak with David Turner, General Manager ...

28 Jul 26min

How Ensono is Building AI Resilience Beyond a Single Model

How Ensono is Building AI Resilience Beyond a Single Model

What happens when an AI experiment becomes a production service that your employees, customers, and daily operations depend upon? In this episode of Tech Talks Daily, I speak with Brian Klingbeil, Chi...

27 Jul 28min

How RedStone is Connecting Financial AI Agents to Verifiable Data

How RedStone is Connecting Financial AI Agents to Verifiable Data

What happens when an autonomous AI agent makes a financial decision using inaccurate, outdated, or poorly synchronized data? In this episode of Tech Talks Daily, I speak with Marcin Kaźmierczak, cofou...

26 Jul 25min

How Craftable is Using AI to Protect Restaurant Margins and Human Hospitality

How Craftable is Using AI to Protect Restaurant Margins and Human Hospitality

What if a restaurant could identify a margin problem while the ingredients were still being unloaded, rather than discovering it several weeks later? In this episode of Tech Talks Daily, I speak with ...

26 Jul 28min

How Valliance Fixes the Enterprise AI ROI Problem

How Valliance Fixes the Enterprise AI ROI Problem

Why do so many enterprise AI initiatives begin with impressive demonstrations but struggle to produce measurable business value? In this episode of Tech Talks Daily, I speak with Dom Selvon, CTO and v...

25 Jul 30min

How Genesys Cloud Helped StepChange Cut Misrouted Calls by 60 Percent

How Genesys Cloud Helped StepChange Cut Misrouted Calls by 60 Percent

What does a modern contact center need to deliver when the person reaching out may already feel anxious, embarrassed, and unsure where to turn? In this episode of Tech Talks Daily, I speak with Chris ...

25 Jul 23min

Beyond AI Pilots: What Valiantys and Mercedes Can Teach Enterprise Leaders

Beyond AI Pilots: What Valiantys and Mercedes Can Teach Enterprise Leaders

What does it really take to build an AI-ready enterprise when your data is fragmented, teams operate in silos, and years of technology decisions have created complexity that no large language model ca...

24 Jul 30min

Populært innen Politikk og nyheter

giver-og-gjengen-vg
aftenpodden
forklart
stopp-verden
popradet
rss-gukild-johaug
aftenpodden-usa
fotballpodden-2
dine-penger-pengeradet
rss-ness
hanna-de-heldige
aftenbla-bla
det-store-bildet
e24-podden
rss-penger-polser-og-politikk
lydartikler-fra-aftenposten
unitedno
rss-utenrikskomiteen-med-bogen-og-grasvik
liverpoolno-pausepraten
oppdatert