That is, QR code, is a common way to transmit information, by scanning the black and white pattern on the ***, quickly access**, applications, payments, etc. However, did you know that *** can also be "swapped" without you knowing?
Recently, researchers affiliated with Tunghai University published a new attack technology that uses lasers (such as infrared or other wavelength lasers) to irradiate long-distance camouflage, which can dynamically change the content of *** without the user's knowledge, so as to guide users to malicious ** and carry out illegal acts.
The principle of this attack technique is to tamper with some of the original information by laser irradiation, so that the *** scanned by the mobile phone becomes fake***, so that the user will be guided to the malicious ***. This attack can be launched from a distance at any time, and is difficult for victims to detect because the point of light that appears when illuminated with an invisible laser is not visible to the naked eye.
The researchers verified the feasibility of this attack, as shown in the figure above, the left side is normal*** and the middle and right sides are the *** experimental results after being irradiated with two different wavelengths of lasers, the laser irradiation successfully changed the content of ***, thus deceiving the user's smartphone.
As shown in the figure above, the researchers conducted a laser irradiation experiment at a distance of 100 meters indoors to further verify the effect of changing the content at different wavelengths and distances, and also analyzed the factors that will affect the accuracy of laser illumination, and found that air fluctuations are an important factor. Air fluctuations caused by air conditioning in the experimental environment destabilize the laser beam, resulting in fluctuations of 2-3 mm, which is thought to be the cause of the discrepancies in the URLs read. The reduced success rate due to air fluctuations suggests that artificially creating wind-induced fluctuations around *** is an effective attack countermeasure. However, the team says that in the future, if experiments are to be conducted over longer distances, such as 1 kilometer, the accuracy of laser irradiation will need to be improved.
In this regard, I remind the majority of users to be wary of the potential risks of ***, and do not think that the physical *** is very safe, in fact, it is possible that the *** has been "replaced" when you are not aware of it. Especially for business friends, it is very necessary to add equipment to broadcast payment information, do not be greedy for convenience, and give criminals an opportunity.