Novel phising campaign uses corrupted Word documents to evade security

A phishing campaign uses intentionally corrupted Microsoft Word attachments that prompt Word's repair feature to display a QR code; victims who scan the code are directed to a fraudulent Microsoft login page to harvest credentials. The malformed files frequently evade security scanners and VirusTotal detections because they cannot be properly analyzed, making this a novel evasion technique.