The FBI and CISA have warned that Russian intelligence hackers are targeting Signal users' backup recovery keys, compromising thousands of accounts worldwide. This phishing campaign has escalated, giving hackers persistent access to message history. Signal is a popular encrypted messaging app.
The hackers are using phishing tactics to trick Signal users into revealing their backup recovery keys. With these keys, they can restore the user's message history on a new device, allowing them to read all previous conversations. This is a significant escalation of the campaign, which had already compromised many accounts.
The FBI and CISA are urging Signal users to be cautious when receiving suspicious messages or emails asking for sensitive information. Users should never share their backup recovery keys with anyone. The agencies have not disclosed the exact methods used by the hackers to obtain the keys.
The phishing campaign has already compromised thousands of Signal accounts globally. The hackers are likely using the accessed message history for intelligence gathering and espionage. Signal users are advised to disable their backup feature or use a more secure method to store their recovery keys.
Even without a backup key, hackers may still be able to access a user's Signal messages if they have physical access to the device. However, having a backup key allows them to access the entire message history on a new device.
The consequences of this phishing campaign are severe, with potential intelligence gathering and espionage. Signal users must be vigilant and take steps to secure their accounts. The FBI and CISA will continue to monitor the situation and provide updates.
What should I do if I've already shared my Signal backup recovery key? If you've shared your key, immediately disable your Signal backup and generate a new recovery key. Be cautious of suspicious messages or emails.
How can I securely store my Signal backup recovery key? Store your key in a secure location, such as a safe or a secure note-taking app. Avoid sharing it with anyone or storing it digitally.
Can I still use Signal securely? Yes, you can still use Signal securely by disabling your backup feature or storing your recovery key securely. Be cautious when receiving suspicious messages or emails.