“Urgent reminder” tax scam wants to phish your Microsoft credentials

This report describes a tax-season phishing campaign that distributes PDFs with QR codes leading to a doubleclick.net redirect and a credential-phishing site (fmhjhctk.ru) that harvests Microsoft account passwords; Malwarebytes blocked the site and the write-up includes screenshots, defensive advice, and IRS resources to help users avoid such scams.