QR Code Phishing (Quishing): Food Supply Chain Management Traceability Risks Combined with Blockchain Technology

Abstract

QR (Quick Response) code phishing (Quishing) is a type of QR code attack. The attacker attacks or manipulates the QR code details. It harms supply chain management (SCM). When the attacker sends a manipulated QR code during SCM, all actors participating in the environment are affected, and the entire system is compromised. SCM, particularly in the food industry, harms the system, increasing the risk of foodborne illnesses for consumers. So, our proposed methods to avoid this kind of Quishing attack in SCM are as follows: We integrate blockchain technology to trace the food product from the manufacturer to the consumer without any Quishing; in our proposed methods to avoid this Quishing, we utilized the blockchain-based verification of the QR code, which means storing the food product details along with the QR code. This process allows all stakeholders in supply chain management (SCM) to authenticate the QR code before processing it. Ultimately, it helps consumers ensure the trustworthiness of food products while also assisting manufacturers in maintaining their reputation. We implemented the proposed method on a decentralized, open-source Ethereum testnet. Smart contracts are written using Remix Solidity, and the results are analyzed, proving that the proposed method is secure in the food supply chain management system.