4 ms·

Tens of thousands of false QR codes in circulation after large-scale fraud in NL

3 points by the-dude 5y ago

the-dude 5y ago
There is only a Dutch source. Will try to post a translation. " Due to large-scale fraud at the GGD location in Schiphol, tens of thousands of false QR codes are in circulation. Two women and a man have been arrested on suspicion of creating fake QR codes, which were then traded. This is apparent from research by RTL Nieuws. The Public Prosecution Service confirms that three people have been arrested on suspicion of fraud with QR codes. The three employees, who were hired by the GGD through an employment agency, had access to the system to generate QR codes. One of the suspects is suspected of having provided her password that allowed her to log into the system she was working with, which allowed others to create QR codes. The three suspects, who worked at the GGD location in the arrival hall of Schiphol, are currently in custody. Some of the false QR codes will be blocked this evening, the ministry confirms after questions from RTL Nieuws. Hundreds of euros per QR code The fake QR codes were offered and traded through various channels for prices from hundreds of euros to sometimes as much as a thousand euros. The QR codes are in the name of your choice and can be used to gain access to, among other things, catering and events, even if someone has not been vaccinated or has not taken a test. In total, tens of thousands of fake QR codes were created by the employees. That is a multiple of the 297 fraudulent QR codes currently blocked by the ministry. These codes were shared in chat groups and misused to gain access, according to an investigation by the NOS. "
giuliomagnifico 5y ago
And we are at two times this happened in less than one year. This is the price to pay when you leave the private keys to sign thousands/millions of certificates in the hands of few authorities. Plus the system was built quickly and I think for that it’s also complicated to revoke only the incriminated keys without invalidate a lot of “true” QRs
- the-dude 5y ago
  There is also neoliberal effetcs at play : government agencies have been underfunded and now they need to step up and hire temporary workers from job agencies. These workers have little to no loyalty to the org they work for.
  - GrumpyNl 5y ago
    It has nothing to do with the keys. Those people were buying registration as vaccinated. The employees just registered them as vaccinated.

3 points by the-dude 5y ago

There is only a Dutch source. Will try to post a translation. " Due to large-scale fraud at the GGD location in Schiphol, tens of thousands of false QR codes are in circulation. Two women and a man have been arrested on suspicion of creating fake QR codes, which were then traded. This is apparent from research by RTL Nieuws. The Public Prosecution Service confirms that three people have been arrested on suspicion of fraud with QR codes. The three employees, who were hired by the GGD through an employment agency, had access to the system to generate QR codes. One of the suspects is suspected of having provided her password that allowed her to log into the system she was working with, which allowed others to create QR codes. The three suspects, who worked at the GGD location in the arrival hall of Schiphol, are currently in custody. Some of the false QR codes will be blocked this evening, the ministry confirms after questions from RTL Nieuws. Hundreds of euros per QR code The fake QR codes were offered and traded through various channels for prices from hundreds of euros to sometimes as much as a thousand euros. The QR codes are in the name of your choice and can be used to gain access to, among other things, catering and events, even if someone has not been vaccinated or has not taken a test. In total, tens of thousands of fake QR codes were created by the employees. That is a multiple of the 297 fraudulent QR codes currently blocked by the ministry. These codes were shared in chat groups and misused to gain access, according to an investigation by the NOS. "

giuliomagnifico 5y ago

And we are at two times this happened in less than one year. This is the price to pay when you leave the private keys to sign thousands/millions of certificates in the hands of few authorities. Plus the system was built quickly and I think for that it’s also complicated to revoke only the incriminated keys without invalidate a lot of “true” QRs

the-dude 5y ago
There is also neoliberal effetcs at play : government agencies have been underfunded and now they need to step up and hire temporary workers from job agencies. These workers have little to no loyalty to the org they work for.
- GrumpyNl 5y ago
  It has nothing to do with the keys. Those people were buying registration as vaccinated. The employees just registered them as vaccinated.