A attack using QR codes is known as "quishing," a combination of QR code and phishing. The danger isn't the QR code itself; it's where it quietly sends you.
The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication ...