ZeroHour
Schneier on Securitypublished ()ingested Bruce Schneier

Stealing Bicycles by Swapping QR Codes

lowPhishing & fraudimportance 30
Full article148 words · extracted from schneier.com · click to collapse

This is a clever hack against those bike-rental kiosks:

They’re stealing Citi Bikes by switching the QR scan codes on two bicycles near each other at a docking station, then waiting for an unsuspecting cyclist to try to unlock a bike with his or her smartphone app.

The app doesn’t work for the rider but does free up the nearby Citi Bike with the switched code, where a thief is waiting, jumps on the bicycle and rides off.

Presumably they’re using camera, printers, and stickers to swap the codes on the bikes. And presumably the victim is charged for not returning the stolen bicycle.

This story is from last year, but I hadn’t seen it before. There’s a video of one theft at the link.

Tags: scams, theft

Posted on February 21, 2022 at 6:31 AM26 Comments

Sidebar photo of Bruce Schneier by Joe MacInnis.

Text extracted automatically; images, tables and formatting may be missing. Original: https://www.schneier.com/blog/archives/2022/02/stealing-bicycles-by-swapping-qr-codes.html