QR code phishing attacks surged in 2024–2025, hitting executives 42× harder with advanced evasion and physical-digital hybrid tactics.