Russian Hackers Have a New Way Into Your Signal Messages — and It's Disturbingly Simple
Russian Hackers Have a New Way Into Your Signal Messages — and It's Disturbingly Simple If you use Signal and have ever received a message warning you about a security update or an account sync problem, read this carefully. The FBI and CISA have issued an updated warning about a sophisticated phishing campaign, tied to Russian intelligence services, that has quietly evolved into something more dangerous than its earlier form. Rather than trying to crack Signal's famously strong encryption — which remains unbroken — these attackers have found a far easier path in: your backup recovery key. How the Scam Works It starts with a convincing message. The attackers pose as Signal's support team and tell you that following a wave of hacking attempts by actors from Iran and post-Soviet countries, Signal is rolling out "mandatory two-factor verification." It feels urgent. It looks official. And it comes with step-by-step instructions. Those instructions walk you through...