A 'drive-by download' occurs when a QR code prompts an automatic, often unnoticed, download of malicious software onto the user's device upon scanning the code.