Microsoft says its products blocked more than 15,000 emails each day that targeted the education sector with phony QR codes.