We've warned you about QR code scamsbefore. Now,Bad Detective: Food Chain [Uncut] we're warning you about a new QR code scam – one that may show up in your physical mailbox.
The National Cyber Security Centre (NCSC) in Switzerland has issueda new alert based on a new scheme from hackers and scammers that weaponizes the postal service. The scam involves a physical piece of mail arriving at a target's door, urging them to download an app.
The app, which can be downloaded via a QR code displayed on the mailer, is actually malware disguised as a legitimate app that can steal data from the user's device.
The hackers and scammers behind this fraudulent scheme imitate Switzerland's Federal Office of Meteorology and Climatology, right down to the official governmental seals on the mailed document. The mailer urges recipients to scan the QR code in order to download a "Severe Weather Warning App" for Android devices.
When the QR code is scanned, users aren't taken to the official Google Play store, but instead a third-party site. Once there, they are asked to download an "AlertSwiss" app.
As first reported on by The Register,there are some obvious discrepancies between the hacker's app and the real one that it copies. There is a genuine government app with the same name, but it's called "Alertswiss," without the capitalized "S." In addition, while the fake app attempts to mimic the app logo, it isn't exactly the same.
The fake app, when downloaded, installs a "variant of the Coper trojan" malware on the target's device. This malware can log the user's activity on the device, stealing passwords, messages, notifications, as well as other sensitive information. In addition, phishing pages can be automatically displayed on the infected device as well.
NCSC told The Register that this was the first time it had ever come across malware being delivered via physical mail in this way.
Unlike email, there is a cost associated with sending each piece of physical mail, so this attack method must be delivering some level of success to the scammers behind it.
If bad actors aren't already looking at replicating this campaign outside of Switzerland yet, this warning should serve as an important notice to be on the look out for QR code scams being sent to your physical address in the not-so-distant future.
Topics Cybersecurity
The Hatchet Falls by Sadie SteinLeo Tolstoy, Emerging Author, and Other News by Sadie SteinWhat We’re Loving: Saintly Comics, High Relief by Sadie Stein“Definitional” by Raymond QueneauFree Verses by Dorian RolstonThunderStick by Pamela Petro“I Always Start on 8 January” by Sadie SteinHere is a LEGO Scrooge for You by Sadie SteinNew Hans Christian Andersen? And Other News by Sadie SteinScary Children Reading, and Other News by Sadie SteinLiterary Resolutions, and Other News by Sadie SteinApocalyptic Reads, and Other News by Sadie SteinOral Sadism and the Vegetarian Personality by Sadie SteinDigital Silence by Alex CarpThunderStick by Pamela PetroHappy Birthday, Huck! by Sadie SteinPapa's Cats, and Other News by Sadie SteinCivilWarLand in Bad Decline: Preface by George SaundersWater and Wonder by John LinganDiscipline and Punish by Arthur Holland Michel 'Crying Jordan' comes to life at Medal of Freedom award ceremony Why Varys will definitely betray Daenerys on 'Game of Thrones' Android Auto's new look is darker, packs more onto car screen 'Avengers: Endgame' sinks a long NASA fits 265,000 galaxies into a single ‘Hubble Legacy Field’ image Donald Trump disavowed the alt Facebook managed to screw up its ban on 'dangerous' individuals 'Game of Thrones' Episode 4 recap: A disappointing middle 30 gifts for people who are obsessed with their kitchen Stephen Merchant breaks down how technology has changed what it means to be famous This New York City museum is opening an exhibit dedicated to 'Om' FTC split on punishing Mark Zuckerberg in settlement with Facebook YouTube 'conspiracy': Rogue engineer reveals secret plot to kill Internet Explorer Moving moment Kate Middleton hugs crying mum of autistic boy 7 best places to get your drama fix on the internet AT&T, Verizon, Sprint, and T How you'd love to troll your Trump In 'Fortnite,' a volcano erupted and a whole city was wiped out Google unveils cheaper Pixel 3a and 3a XL, starting at $399 Cheeky kid flips off TV crew in the middle of live broadcast
2.406s , 10108.9296875 kb
Copyright © 2025 Powered by 【Bad Detective: Food Chain [Uncut]】,Steady Information Network