One message seen by the security experts featured an attachment called "Urgent Reminder" which then included a QR code. If scanned, this opens a fake Microsoft log in window. It's thought that any ...