Telegram scam lets attackers hijack accounts via fake “verification” QR codes—no password or SMS needed, locking users out ...