IRS-themed phishing campaign utilizes QR codes to compromise cryptocurrency credentials

A new phishing campaign is distributing fraudulent IRS-branded correspondence containing malicious QR codes. These codes redirect victims to credential-harvesting sites targeting cryptocurrency wallets and exchange accounts, marking a shift toward physical-to-digital social engineering vectors.