CIO'S MESSAGE - October 21, 2024

There once was a code you could safely scan, 
But beware, it might be a scam!
With phishing so sly, 
It could trick your eye,
Stay sharp and avoid their sly plan! 

What is "Quishing?"

Cybercriminals are getting crafty with “quishing” (QR code phishing). Here’s what you need to know to stay safe: 

What's the Risk?

• Phishing Attacks (Quishing): Scammers use QR codes to redirect you to fake websites that steal your login details. 
• Downloading Malware: Scanning a code could secretly download harmful software. 
• Financial Theft: Some QR codes lead to payment pages where hackers can access your financial accounts. 

How to Identify Safe QR Codes

• Trust the Source: If the QR code is from an unknown or suspicious source, don’t scan it. 
• QR Code Tampering: Malicious actors might cover legitimate codes with harmful ones. 
• Check the URL: Ensure the website starts with “https://” and look for a padlock symbol. 
• Sensitive Information: Be cautious if the site asks for login credentials or payment details. 
• Trusted Location: Verify QR codes on physical ads or flyers with the organization that posted them. 

Best Practices for Scanning QR Codes

• Use Built-in Scanners: Avoid third-party apps that may be less secure; user your mobile device’s built-in camera app. 
• Inspect URLs: Make sure they match the expected website. If it looks odd, don’t proceed. 
• Be Attentive: Avoid scanning codes from random flyers or unverified emails. 

Cybersecurity Awareness Month Activities and Resources

Visit our CyberMonth website:

• 6 more remaining webinars (1 CSULB-hosted on "Launching, Building, and Growing your Cybersecurity Career" and 5 hosted by other CSU campuses)
• Fun, informative videos, like this one:

• WIN LB SWAG! Test your Cybersecurity knowledge by taking a short quiz and be included in a drawing for one of many LB swag packs. Quiz closes October 31, 2024. Winners will be contacted via email.