Library
NEVER
CLICK
ON QR CODES.
You’ve proven the beginning point: humans are lazy and will take the path of least resistance, even if it is simply to avoid typing in a confirmed address.
Luckily this was not a threat - but take it as a reminder: ASSUME COMPROMISE and work from there.
Please reach out if there is ever anything we can do to assist on a safety question, specific assignment, risk assessment, or threat.