Wednesday, May 10, 2023

Airborne malvertising can't be far behind

found on eBaum's World

It's one thing to put some advertising slogan into the sky by flying a banner behind a plane or something. You might even fit a short URL up there that way. This, however, lowers a lot of barriers to getting your browser to their web site. That can be a boon for people advertising a legitimate product, but also to people trying to compromise your device. 

I know there's some debate about whether QR codes are dangerous from a cybersecurity perspective, and I get that in certain contexts it's relative effectiveness as an attack make it less attractive than more traditional approaches, but this is a scale that hasn't been considered before - a single QR code that can reach millions of people at once.