Niloufer Tamboly is a cybersecurity expert who holds several certifications including CISSP, CPA, CISA, CFE, CIA, CGMA, and CDPSE. She currently works in risk management at Verizon and teaches cybersecurity courses as a part-time lecturer at Rutgers University. Her background includes an MBA in security assurance. She is a co-founder of the (ISC)2 New Jersey chapter and organizes CISSP and CCSP exam study groups. She discusses the history of QR codes, how scammers have exploited them, and provides tips for rebuilding trust in their use such as using QR code scanners to check for valid URLs and treating codes in emails cautiously.

1. Niloufer Tamboly, CISSP, CPA
Drive Digital Trust
One Code At A Time

2. Niloufer Tamboly
👩💻 Work
Verizon – Risk Management
🧑🏫 Part-time lecturer
Rutgers University – 401 level class
🎓 Education MBA in Security Assurance
🔖 Certifications CISSP, CPA, CISA, CFE, CIA, CGMA, CDPSE, Open FAIR
🔔 Patents
Establishing An Alternate Call Path Using Short-Range Wireless Technology
System For And Method of Generating Visual Passwords
🤝 Volunteer
Cofounder - Step Up Skill and (ISC)2 New Jersey Chapter
Organizer - CISSP & CCSP Exam Study Group

3. Disclaimer
The views expressed in this presentation and during the session
are my personal opinions and do not reflect the official policy or
position of my respective employers.

4. History & Uses
Denso Wave Inc., a subsidiary of Toyota invented the QR code in 1994
• Track vehicles and parts
• By marketers to convert users to buyers
• Prevent mistakes when administering medication
• Accessibility for persons with disabilities

12. Scammers were not far behind…

13. How does the scam work?

14. Contactless social engineering

17. Another version of the parking scam will drain
the victim’s bank account

25. Because of public distrust
Use of QR codes was restricted to industrial,
medical and others

26. The Comeback

34. Never let a crisis go to waste

36. How Do We Rebuild Trust?

38. Install anti malware for your mobile devices

39. Try alternative payment methods

40. Never scan a QR code to login

41. Use QR code scanners to check for valid URLs

42. Treat QR codes in emails with same caution
as phishing attempts

43. Watch out for tampered QR codes pasted in
public places

45. Sources: https://www.rentonreporter.com/news/police-investigating-
fake-parking-ticket-scam/
Tweets belong to the respective owners and is used for
educational purpose
https://help.twitter.com/en/rules-and-policies/fair-use-
policy
Tweets from:
@COSETXST
@neo_Tigray
@ChouYodaTzuyu
@greg16676935420
https://go.gov.sa/qr-scan
https://nhs.gov

46. Let’s connect