Amakhodi e-QR abe yithuluzi lansuku zonke lokwenza izinkokhelo, ukufinyelela amamenyu, nokuxhuma kumasevisi edijithali. Kodwa lokhu kujwayelana nakho kuye kwasetshenziswa yizigebengu ze-inthanethi ukuze kuthuthukiswe ukukhwabanisa okuku-inthanethi. Inkampani yezokuphepha i-ESET ithole ukwanda okukhulu kokuqedwa kolwazi, uhlobo lwe-phishing olusebenzisa la makhodi anamachashazi ukuqondisa abasebenzisi kumawebhusayithi anonya ngaphandle kokuba bakwazi ukufunda i-URL yendawo oya kuyo.
Izibalo zakamuva ziyazikhulumela : i-ESET Threat Report H1 2026 ikhombisa ukuthi amakhodi e-QR anonya avela ku-11% wawo wonke ama-imeyili e-phishing, ngesilinganiso sokutholwa okungaphezu kuka-100.000 ngenyanga. Eqinisweni, iSpain isendaweni yesibili emhlabeni ngenani lokuhlaselwa kwalolu hlobo, ilandela i-United States kuphela.
Kuyini ukuxosha futhi kungani kuchuma?
I-Quishing empeleni iyindlela ehlukile ye-phishing yakudala, kodwa inesici esengeziwe: isixhumanisi esinonya sifihliwe ngaphakathi kwekhodi ye-QR. Umsebenzisi uskena isithombe bese egcina esewebhusayithini ekhohlisayo engantshontsha amaphasiwedi akhe asebhange, iziqinisekiso zokungena ngemvume, noma ngisho nokufaka i-malware kudivayisi yakhe.
Esinye sezizathu zempumelelo yaso ukuthi indawo lapho isixhumanisi sikhona ayibonakali khona ngokushesha. Ku-imeyili esolisayo, ungabona isizinda esingekho emthethweni; lapha, konke kucindezelwe kube isikwele samaphikseli. Ngaphezu kwalokho, lawa makhodi afakwe emilayezweni njengesithombe esinamathiselwe noma i-PDF, edlula izihlungi eziningi zokuphepha kwe-imeyili. Futhi icebo lisebenza kakhulu ngoba lihambisa ukuxhumana kusuka kukhompyutha yomsebenzi kuya kufoni ephathekayo, idivayisi evame ukungabi nazinga elifanayo lokuvikelwa.
Ubunjiniyela bezenhlalo budlala indima ebalulekile. Izigebengu zisebenzisa isithombe semikhiqizo eyaziwayo, njenge-DocuSign noma i-Microsoft, futhi zisebenzisa izimo eziphuthumayo, isibonelo, ngokuxwayisa ngokuthi i-akhawunti izomiswa uma ingaqinisekiswanga. Ngenxa yalokho, umlayezo ufika ebhokisini lokungenayo, futhi isisebenzi asitholi noma yiziphi izinkomba ezivamile zobugebengu bokweba imininingwane ngoba akukho mbhalo okufanele uwufunde kusixhumanisi.
Ukuqeda eSpain, isexwayiso esingayeki
ISpain isibe yindawo ethandwa kakhulu yalolu hlobo lokukhwabanisa. I-ESET ilinganisela ukuthi u-17% wokutholwa kokukhishwa kwemininingwane emhlabeni wonke ugxile ezweni, okuqinisekisa ukuthi le ndlela ithole indawo evundile. Elinye lamacala amele kakhulu laxazululwa ngenxa yokungenelela kwe-National Cybersecurity Institute (INCIBE). Ikhasimende lendawo yokudlela liskene ikhodi ye-QR kumenyu, eyayishintshiwe, futhi ngokungazi labhalisela isevisi ye-premium.
I-OCU (i-Spanish Consumers' Organisation) iphinde yagqamisa udaba lwamakhodi e-QR angamanga anamathiselwa ezimotweni ukuze alingise izinhlawulo zomgwaqo. Lapho isisulu siskena ikhodi ukuze sikhokhe inhlawulo, sidlulisela imininingwane yamakhadi aso kuwebhusayithi ekhohlisayo. Lawa maqhinga awagcini lapho: izitika ezinamakhodi e-QR angamanga zibonwe zimboza amakhodi angempela amamitha okupaka kanye namabhayisikili abiwe. Abahlaseli bamboza okwangempela ngekhodi ephrintiwe ekhomba isizinda sabo.
Amalebhu e-ESET akhombisa ukuthi u-Ephreli 2026 uphawule inani eliphakeme lokutholwa, yize uchungechunge lwesikhathi lwase luqalile kakade ukubonisa ukwanda okuqhubekayo. Ukuphepha kweselula kanye ne-imeyili yenkampani kuyizivikelo eziyinhloko, kodwa imikhuba yabasebenzisi yokuyekethisa yenza okunye.
Ezinye izinhlangothi zokukhwabanisa kwe-QR
Akukhona nje ukukhwabanisa okukhulu okubhekiswe kumakhasimende ezindawo zokudlela. I-U.S. Internal Revenue Service (IRS) iphinde yathola imikhankaso ehilela izincwadi ezibonakalayo ezifihliwe njengezaziso zentela, eziqukethe ikhodi ye-QR ethembisa ukuqinisekiswa kwe-akhawunti noma imibhalo yabanikazi be-cryptocurrency. Ukuskena ikhodi kuthatha isisulu kuwebhusayithi ecela imisho yembewu noma okhiye abayimfihlo—into enikeza ukulawula izimali zedijithali.
Indima yamazwe nayo ingemuva kwalezi zingibe . Iseluleko se-FBI kusukela ngoJanuwari 2026 sikhulume ngeqembu likaKimsuky, okusolwa ukuthi lihlobene neNyakatho Korea, njengelibhekene nokuhlaselwa kwe-QR code yobunhloli be-cyber lapho basebenzisa khona izaba ezifana nemibhalo kahulumeni noma amafomu ukuze bathole ukufinyelela ezinhlanganweni zocwaningo. Ngamanye amazwi, le ndlela iphinde yangena eqenjini lamaqembu e-APT, ngenhloso yokubeka engcupheni amanethiwekhi anenani eliphezulu.
Indlela yokuzivikela ekulahlekelweni yithemba
Isivikelo esiyinhloko kulobu buqili siyinto eyisisekelo njengokufunda ukungabaza. I-INCIBE incoma ukuthi ume kancane ngaphambi kokuskena noma iyiphi ikhodi ye-QR ethunyelwe endaweni yomphakathi. Uma isitikha sibonakala siqhekeka, sibonisa izimpawu zokuphazanyiswa, noma siphezu kwenye ikhodi, akufanele sisetshenziswe. Endabeni yama-imeyili, qaphela noma yimuphi umyalezo ongacelwanga okukhuthaza ukuthi uskene ikhodi ye-QR, ikakhulukazi uma iqukethe isikhathi esiningi.
Kungumqondo omuhle futhi ukuhlola i-URL ikhodi eholela kuyo. Uma ifoni yakho inikeza ukubuka kuqala kwesixhumanisi, bheka amaphutha okubhala, ama-domain amafushane, noma ukuhlukahluka okungajwayelekile kwamawebhusayithi ajwayelekile. Ukukhubaza ukuvula isixhumanisi ngokuzenzakalelayo lapho uskena ikhodi ye-QR kungenye isendlalelo esiwusizo sokuvikela, kokubili izinhlelo ze-iOS ne-Android. Futhi ungalokothi unikeze ulwazi lokukhokha, iziqinisekiso, noma imininingwane yesikhwama ngaphandle kokuqinisekisa ngesiteshi esihlukile ukuthi isicelo sisemthethweni.
Kumabhizinisi, ochwepheshe be-ESET batusa ukufaka phakathi ukususwa kwezinhlelo zokuqwashisa kanye nokulingisa i-phishing. Ubuchwepheshe buyinye into ebalulekile: izihlungi ze-imeyili ezikwazi ukukhipha nokuhlaziya amakhodi e-QR kumafayela, ukuvikela amadivayisi eselula ezinkampani, kanye nokuqinisekiswa okumelana ne-phishing kwama-akhawunti anelungelo eliphezulu. Ukusebenzisa isimiso selungelo elincane nokugcina isofthiwe isesikhathini kuyizinyathelo ezengeziwe ezivimbela ukuskena okunonya ukuthi kungabi yisivumelwano esibalulekile senethiwekhi.
Ukuthandwa kwamakhodi e-QR akuyona into entsha, kodwa futhi nosongo olubangelwa yiwo aluyona into entsha. I-Quishing isivele isunguliwe njengosongo oluhambisa idatha esikrinini kanye nekhodi ye-binary, futhi izinyathelo ezisebenza ku-phishing esekelwe kumbhalo nazo ziyasebenza lapha uma zisetshenziswa ngokuqonda okuvamile. ISpain isivele iphakathi kwezinkinga, futhi umehluko phakathi kokuba yisisulu nokugwema ukwesaba uncike kulowo mkhuba olula wokuhlola, ngaphambi kokuskena, ukuthi indawo okuyo akuyona inkohliso.