Or maybe a fraudulent signal app.

I mean, generally speaking, just don’t click on random links. This is a random link. Qr codes are valuable but we’re conditioning society to just be cool with clicking on random shit without putting much thought into it.

Or xss/sqli/etc attacks on vulnerable sites that don’t sanitize url query parameters

Back when emojis were novel in the corporate environment, I always questioned who at IBM decided a sheep emoji was a valuable addition. I mean, I used it in messages, but probably not in the way IBM intended…