CyberCertPrepMobile Security FundamentalsMobile Threats & MalwareEASYFree question
A fraud analyst is investigating a wave of mobile banking fraud. Victims report scanning a QR code at what appeared to be a legitimate ATM poster. Post-scan analysis shows the QR code triggered an install of a malicious app. Which attack scenario fits this description?
- A.A. A malicious QR scanner app pre-installed on the victim's device replaced the legitimate scanner
- B.D. A Bluetooth exploit was triggered when the victim's phone was near the ATM's NFC reader
- C.C. The QR code exploited a zero-day in the Android camera's built-in QR decoder to execute shellcode
- D.B. A QR code planted in a physical location (quishing) redirected users to a malicious APK download page or a phishing site harvesting banking credentials
Why D is correct
QR code phishing (quishing) involves placing malicious QR codes in physical or digital locations trusted by victims. Scanning redirects to a malicious URL that either downloads an APK (if 'Install from Unknown Sources' is enabled or exploits a WebView flaw) or presents a phishing page. This is distinct from a malicious pre-installed QR scanner app. Zero-day camera decoder exploits are possible but extremely rare and not the described scenario. Bluetooth/NFC is not involved in QR code scanning.
Know someone studying for Mobile Security Fundamentals? Send them this one.