This is just one of the weaknesses of QR codes - the implicit trust that the code will take you where you want to go. New ...
New Sneaky 2FA phishing kit targets Microsoft 365 accounts, bypassing 2FA using QR codes and anti-analysis measures.