New defense tools from Abnormal Security defend against seemingly harmless QR codes