FBI Warning: Crooks are Using Fake QR Codes to Steal Your Passwords and Money

By Liam Tung

QR CODES ARE USEFUL shortcuts to online resources via a phone's camera, but scammers are now tampering with them to direct victims to phishing pages and cryptocurrency scams.

QR or 'Quick Response' codes have been connecting scanners to real-world objects since the 1990s, but got widely adopted during the pandemic as businesses moved to contactless communication and payments via QR codes on restaurant menus, parking meters and other public spaces.

But scammers are now targeting the QR code's increased familiarity by tampering with the pixelated barcodes and redirecting victims to sites that steal logins and fi nancial information, according to an FBI alert. "Businesses use QR codes legitimately to provide convenient contactless access and have used them more frequently during the COVID-19 pandemic. However, cybercriminals are taking advantage of this technology by directing QR code scans to malicious sites to steal victim data, embedding malware to gain access to the victim's device, and redirecting payment for cybercriminal use," the FBI notes in its alert.

The FBI refers to the use of QR codes in phishing emails to steal Microsoft 365credentials in October. The QR codes were useful to attackers because the barcode images bypassed email fi lters that use URL scanners to block malicious links.

The FBI in October said it had recently started to receive reports about malicious QR codes being used, particularly in cryptocurrency scams. "Crypto transactions are often made through QR codes associated with crypto accounts… making these transactions easy marks," the FBI noted.

"Do not scan a randomly found QR code," the FBI warned.

Ars Technica reported about scammers placing fraudulent QR code stickers on parking meters in major Texas cities. These aimed to trick people into paying for parking to a fraudulent website.

The FBI's alert addresses this type of scam, too:

"A business provides customers with a QR code directing them to a site where they can complete a payment transaction. However, a cybercriminal can replace the intended code with a tampered QR code and redirect the sender's payment for cybercriminal use."

QR codes can also load malware to steal financial information and then withdraw funds from victim accounts, the FBI warns.

There are parallels between email phishing and malicious QR codes stuck on public spaces. How do people know which ones to trust? Employee cyber-awareness training usually tells users not to click on links from unsolicited email, but they still do.

Some of the FBI's self-defense advice warns against following common practices when using a QR code, but the overall message is to exercise

caution when entering information from a

website accessed via a QR code. "Law enforcement cannot guarantee the recovery of lost funds after transfer," it warns. The FBI's tips for smartphone users include: • check the URL after scanning a QR code because the URL may look like the legitimate site; • be careful when entering credentials or fi nancial information on a site visited via a QR code; • avoid downloading an app from a QR code and instead use an offi cial app store; and • call the organization if it sent a bill in email, allowing payment through a QR code in order to verify its authenticity.

Also, don't download a QR code scanner because most phones have one built in to the camera.

Finally, avoid making payments through a site navigated to from a QR code, the FBI warns. Instead, manually enter a known and trusted URL to complete the payment. www.zdnet.com/article/fbi-warning-crooks-are-usingfake-qr-codes-to-steal-your-passwords-and-money Image credit: master-print.com

What Tech Hubs Have Achieved in Africa in the Last Decade

By Alexander Onukwue

WHEN ANALYZING PROGRESS in Africa’s startup scene, attention focuses on the startups solving user problems and the investors who fund them. But for the past decade, one of the ecosystem’s most active players have been tech hubs.

The earliest examples, like iHub in Kenya and Co-creation Hub in Nigeria, started as spaces for developer meets and hacker communities, to foster creativity and collaboration. But from 117 hubs in 2015 to 618 in 2019, the number and model of tech hubs in Africa have changed to a point where it is no longer enough for hubs to assist the birth of innovation by merely off ering coworking spaces or so-called incubation programs. Hubs need to actively drive startups towards scale and success.

As the organization that helps coordinate collaboration between tech hubs, AfriLabs has a central place in African tech. Founded in 2011, it has 320 hubs in 51 countries in its network, and undertakes programs and funding initiatives to benefi t member hubs. It is currently developing an Africa-focused hub management curriculum in partnership with Strathmore University in Kenya, and recently launched Catalytic Africa, a project to co-invest in startups with African angel investors.

Quartz spoke with Anna Ekeledo, the executive director of AfriLabs, to get a sense of how far tech hubs have come in Africa, and what lies ahead. This interview has been edited for clarity and length.

What do hubs in Africa off er at the moment?

All AfriLabs members have physical spaces that off er basic infrastructure like electricity, internet connectivity, and corporate real estate. But hubs also off er services like business advisory and legal services, including access to mentorship and investors.

Obviously these happen in various degrees; hubs in more mature African ecosystems like Nigeria, Kenya, South Africa, Ghana, and Egypt, and the ones in major cities are better able to off er access to venture capital funding to their startups. Quite a number of them increasingly run cohort-based programs that last between 12 and 16 weeks depending on the stage of the startups. Other services include support to the ecosystem such as policy advocacy, and tech talent development.

These seem like important needs, but can it not be said that what businesses really want is to get money and fi gure the rest out by themselves?

I will beg to disagree. If you are a well-educated startup founder from a mature ecosystem with access to a support system in your industry that can guide you through the way, and the right policy environment, then yes it may be easy to launch.

But in other instances, it will be incredibly diffi cult. For example, launching a fi ntech startup is easier in Kenya than in Botswana because the latter still has to develop its support structures. If you speak to startups that succeed in Africa, they speak of the support they receive from the ecosystem along the way, by direct funding but also in gaining connection to global accelerators like Y Combinator or guidance in product development. So money is absolutely needed but there’s more to what hubs off er beyond money.

Speaking of Y Combinator, is it a problem for local tech hubs that the typical African startup wants to get into YC as soon as possible?

Some of the hard questions we need to ask ourselves now in the ecosystem is about who owns the startups. One of the main advantages of getting into YC is access to global investors for increased funding. Answering the question of ownership means we need to increase the

amount of funding into African startups by

African startups.

At the end of the day, the competition between global and African accelerators revolves around funding. We should be focusing on increasing the amount of investments by angel investors and incubators. AfriLabs is driving this with our capacity building programs like Catalytic Africa geared at helping hubs set up their funds and connecting to African investors.

It sounds like this problem may not be solved anytime soon?

I’m quite optimistic that it will be solved, if we are calling it a problem.

What are hubs doing to have more women-founded startups come through?

Africa has a few women-only hubs, like AkiraChix in Kenya founded in 2012, while other hubs run cohorts specific to women. At AfriLabs, we award about 15,000 euros to about 10 to 15 hubs every year. One of the award categories last year was for women support. 7 of the 15 hubs we supported ran women support programs, and some collaborated with each other.

We haven’t gotten there yet in terms of women founders in Africa as data show, but I’m glad that we have funds like FirstCheck Africa that are focused on finding women founders at the idea stage.

And what about the Francophone region? Any dedicated activities for it?

AfriLabs has members in practically all Francophone countries, from Senegal to Madagascar. Yes, a lot of support programs from development organizations or funding opportunities focus largely on the Anglophone region. But for all our programs, we ensure that the francophone region is covered. For example, our hub management curriculum is available in French but certain modules are specifi c to the region because business operations are diff erent under the OHADA corporate law system.

One thing we plan to do with Catalytic Africa is to have a pool of funds specifi c to Francophone startups. We plan to ensure that no more than two startups from the same country benefi t from the Catalytic Africa funding project so that we don’t keep funding the usual countries.

Will tech hubs as we know them today still be relevant in Africa in fi ve, ten years time?

Our hope is that tech hubs will evolve as infrastructure improves. If the entire continent is wired with fi ber cables, people will probably not need hubs for internet access but the collaborative element will always be valuable. I really do hope that in 10 years time, tech skills will be part of every university curriculum to close the current talent gap, so that hubs can focus on extremely advanced technologies and not basic skills. https://qz.com/africa/2102189/what-tech-hubshave-achieved-in-africa-in-the-last-decade Image credit: AFRILABS