How scammers hijacked QQ accounts in a phishing QR-code attack.