Swapping QR codes in group invites and artillery targeting are latest ploys.