Be dubious about Signal group invites that don't come directly from someone you know, and you have verified is the person sending the message. Don't join Signal groups from QR codes for from links on websites you're unfamiliar with.
Russian phishing campaigns exploit Signal's device-linking feature
> Russian threat actors have been launching phishing campaigns that exploit the legitimate "Linked Devices" feature in the Signal messaging app to gain unauthorized...