Related: https://www.wired.com/story/russia-signal-qr-code-phishing-a... (https://web.archive.org/web/20250219110740/https://www.wired..., https://archive.ph/MbR9e)
(via https://news.ycombinator.com/item?id=43103692, but no comments there)