Hackers are mailing fake Amazon packages with QR codes inside. Scan it, and malware hijacks your phone in seconds. Here's how to stay safe.