Apple

There is a flaw in the latest version of iOS that could fool iPhone users into visiting a malicious website rather than a safe one.

With iOS 11 Apple introduced a new feature to its built-in camera app, giving users the ability to scan QR codes and access their content (such as URLs).

In other words, just pointing the camera app on your iOS device at the QR code below will invite you to visit www.welivesecurity.com but it will show an unsuspicious-looking domain in the notification, but take an unwitting user to an entirely different URL in Safari.

Source: https://www.welivesecurity.com/2018/03/28/scanning-qr-codes-ios-11s/

"id": "APP18399622",
"linkid": "apple",
"type": "Vulnerability",
"date": "03/2018",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"