
Social media profile: Scanning this type of QR code initiates a “follow” for a specific profile on sites such as Instagram or Twitter, using the scanner’s personal profile. Outside of a vulnerability in the local calendar application, the contents may be unwanted in a business or personal calendar, and deleting a recurring meeting is an annoyance if it was improperly entered. The contents could contain malware, an exploit or other undesirable content.Ĭalendar event: Scanning a QR code automatically adds an event to the device’s calendar, with the option of a reminder. Website or URL: Scanning a QR code can automatically launch and redirect you to a website. If you are concerned about your data and location privacy, why would you ever do this? Location coordinates: Scanning a QR code automatically sends your location coordinates to a geolocation-enabled application. The threat actor knows your email address because you validated it by hitting send to an unknown destination. All that is required is to hit send, and this could be the beginning of any form of phishing or spear-phishing attack.


Email: Scanning a QR code stores a complete email message with the subject line and recipient.
