Question

choose the best answer

which of the following is a reason why attackers use qr codes?

a. they can be previewed before they are scanned
b. they are often found on restaurant menus
c. they force users to read them using a less-secure device
d. they are unfamiliar to most users

Explanation:

Analyze the question

The question asks for a reason why attackers use QR codes in their malicious campaigns (often referred to as "quishing" or QR code phishing).

Evaluate Option A

Option A states: "They can be previewed before they are scanned."
This is incorrect. A QR code is a visual matrix that humans cannot read or preview directly with the naked eye before scanning it with a device.

Evaluate Option B

Option B states: "They are often found on restaurant menus."
While QR codes are indeed common on restaurant menus, this is a legitimate use case, not a direct reason why attackers exploit them. However, the widespread, trusted presence of QR codes in daily life (like on menus) makes users less suspicious of them, which attackers exploit. Let's compare this with other options to find the best fit.

Evaluate Option C

Option C states: "They force users to read them using a less-secure device."
Scanning a QR code typically requires a mobile device (smartphone), which may bypass corporate email security filters, firewalls, or secure web gateways that protect standard desktop computers. This forces the interaction onto a potentially less-secure personal device.

Evaluate Option D

Option D states: "They are unfamiliar to most users."
This is incorrect. QR codes are highly familiar to most modern users due to their widespread use in payments, menus, and check-ins.

Determine the best answer

Option C is a primary technical reason why attackers use QR codes. Email security systems scan links and attachments in emails, but they often fail to parse or inspect URLs hidden inside QR code images. By forcing the user to scan the code with a mobile device, the attacker successfully moves the victim away from secure, monitored corporate environments to a less-secure mobile device.

Answer:

• (A) They can be previewed before they are scanned
• (B) They are often found on restaurant menus
• (C) They force users to read them using a less-secure device (Correct answer)
• (D) They are unfamiliar to most users