Quishing is QR code phishing: attackers use QR codes to lead victims to fake login or payment pages, often bypassing email link filters.