These phishing emails use QR codes to bypass defences and steal Microsoft 365 usernames and passwords

QR codes have less chance of being picked up by cybersecurity defences than links or attachments -- and cyber criminals are trying to exploit them.