This time, they posed as U.S. government representatives to trick volunteers helping Ukraine into giving up their data. Using fake invitations to WhatsApp groups, they lured people into scanning suspicious QR codes (source.
This campaign, dubbed Star Blizzard, specifically targeted volunteers whose work is vital to supporting Ukraine. The hackers' goal was to steal personal data that could then be used for blackmail, surveillance, or even disrupting humanitarian operations.
Friends, stay extra cautious! Never join unknown groups, avoid scanning questionable QR codes, and always verify the sources of any invitations.
But here's a curious thought: why isn't Telegram being attacked? Could it be the hackers' favorite hangout spot? 😏