Russian Cyberspies Caught Spear-Phishing with QR Codes, WhatsApp Groups - SecurityWeek

Russian intelligence agencies, tracked as Star Blizzard, are using spear-phishing tactics to target government and diplomatic figures, defense policy researchers, and organizations supporting Ukraine. They are sending emails with broken QR codes, redirecting targets to a webpage asking them to scan a QR code to join a WhatsApp group, allowing the threat actor to access and exfiltrate data from the target’s WhatsApp account.