Swiss officials have issued a warning about a new hacking scheme that involves the use of QR codes and physical mailboxes. Scammers are sending out fake letters that look like they are from the country's Federal Office of Meteorology and Climatology, asking residents to download a 'Severe Weather Warning App' using a QR code.
The app, which mimics the official Alertswiss app, is designed to trick users into installing it. Once installed, the app contains the Copper trojan malware, which is designed to steal user information, including two-factor authentication information, track notifications and SMSs, and steal stored user credentials from other applications.
The fraudulent app directs users to a third-party site instead of the official Google Play Store, which is a common tactic used in phishing scams. Swiss authorities are investigating the extent of the scam and are urging residents to be cautious when receiving such letters.