If you have recently scanned a QR code and were redirected to a URL starting with d.cscan.com , you are likely wondering: What is this? Is it safe? How does it work?
A pop-up on your PC says your session has expired. It displays a QR code claiming to "Reactivate Microsoft Authenticator." A victim scans the code, thinking they are going to d.cscan.com , but the underlying link actually downloads malware. d.cscan.com qr code
