Those Russia-linked groups, which Google has given the working names UNC5792 and UNC4221, are taking advantage of a Signal feature that allows users to join a Signal group by scanning a QR code ...

Russian state-sponsored threat actors have been increasingly targeting Signal Messenger users, with QR code-powered phishing attacks, malware, and more, experts have warned ...

Another ease-of-use feature, Signal "Group Link" invite pages, is similarly being exploited, with its QR codes linking a user's device instead of adding them into a group chat.