A new phishing campaign uses fake HR emails with QR codes to steal login credentials. Here's how to spot the red flags.
