QR Phishing Scams Gain Motorized Momentum in UK

Researchers and reporting organizations have observed an active QR-code phishing ("quishing") campaign in which attackers place malicious QR-code stickers over parking payment machines; victims who scan the codes are directed to phishing pages impersonating legitimate parking apps (e.g., PayByPhone) and are induced to enter vehicle and payment-card information, enabling financial fraud and missed parking registrations. The activity has been reported across multiple European countries and has spread to Canada and the U.S., with an estimated ~10,000 victims over a two-month span and an FBI public alert issued.