A phishing email disguised as an HR performance review uses a QR code to trick victims. Learn how to spot this quishing scam and stay protected.