Swiss Hackers Exploit Physical Mail to Spread Malware via QR Codes

A new scam in Switzerland uses fake letters and QR codes to distribute malware disguised as a weather app.

The scam involves letters falsely claiming to be from Switzerland's Federal Office of Meteorology and Climatology, urging recipients to download a fraudulent app.
The app, named 'AlertSwiss', mimics the official Alertswiss app but contains the Copper trojan malware aimed at stealing sensitive information.
Recipients who scan the QR code are directed to a third-party site instead of the official Google Play Store, increasing the risk of malware installation.
The malware targets Android users, intercepting two-factor authentication texts and accessing banking apps to steal credentials.
Swiss authorities are advising recipients of such letters to report them and reset their devices if the app has been downloaded.