IT just sent out an email warning about a harmful email going around disguised as a QR code for the employee handbook. This is all well and good, except she started the email all " hey theres an email circulating about the updated employee handbook, it wants you too log in with a QR code"