Signal Warns Users About Hacker Spam

|

In a recent BBC article, technology reporter Liv McMahon writes that the Signal app is warning its users about the growing threat of hacker spam. McMahon highlights a recent warning from Dutch intelligence about a Russia-backed campaign targeting Signal and WhatsApp users, including high-profile individuals. In this campaign, hackers pose as support staff to gain access to accounts or take control of devices.

According to a press release from Dutch intelligence, the “large-scale global cyber campaign” appears to be targeting individuals of interest to the Russian government, including government officials and journalists. “It is not the case that Signal or WhatsApp as a whole have been compromised. Individual user accounts are being targeted,” Simone Smit, director-general of AIVD, told BBC.

In response, Signal stressed that its systems remain secure:

It’s systems have not been compromised and remain robust. These attacks were executed via sophisticated phishing campaigns, designed to trick users into sharing information – SMS codes and/or Signal PIN – to gain access to users’ accounts.

McMahon explains that phishing attacks, like the one identified by Dutch intelligence agencies, involve criminals impersonating trusted sources to steal sensitive information. Signal and WhatsApp advise users never to share their PINs or verification codes and encourage them to take additional security steps, such as blocking messages from unknown contacts.

A Signal representative told the BBC that the company emphasizes user vigilance against phishing attempts. The representative noted that convenient features such as QR codes and text verification codes are being exploited by criminals. Users are advised to regularly check linked devices and remain aware that end-to-end encryption does not guarantee total security.

Despite their end-to-end encryption option, messaging apps such as Signal and WhatsApp should not be used as channels for classified, confidential or sensitive information.

– Dutch MIVD director Peter Reesink told BBC

McMahon added that end-to-end encryption (E2EE) protects message content but cannot protect against compromised accounts or devices. Dutch intelligence believes Russia targeted Signal because of its popularity among officials and its potential for capturing sensitive information.

Acknowledgement: This summary was generated using AI writing tools as part of my AI Explorations process. For more information, please refer to the original articles listed below.

Related Resource link