Archive — US — techcrunch
Hackers are trying to steal passwords and sensitive data from users of Signalclone
Hackers are exploiting a known vulnerability in the Signal clone app, TeleMessage, to steal users' passwords and sensitive data. Security researchers reported that attempts to exploit this flaw (CVE-2025-48927) have been observed, following a previous data breach in May affecting high-ranking officials. Currently, no public reports of successful hacks have emerged, but the risk remains significant.
Key points
- Hackers target TeleMessage due to a flaw disclosed in May (CVE-2025-48927).
- The application is used by high-ranking officials, increasing its appeal to hackers.
- GreyNoise, a cybersecurity firm, reported recent attempts to exploit this vulnerability.
- This exploit allows access to plaintext usernames and passwords, posing risks to privacy.
- Despite the ongoing threats, no confirmed breaches against TeleMessage customers have been reported.
Why it matters
- TeleMessage's use by high-profile government officials highlights risks associated with digital communications.
- The rise in attacks on communication applications parallels the increasing importance of cybersecurity in IT trends through 2025.
- CISA's catalog of exploited vulnerabilities emphasizes the necessity for companies to address known threats promptly.
The ongoing vulnerabilities in TeleMessage and the involvement of high-profile users underline the critical need for robust cybersecurity measures in communication platforms to protect sensitive data from exploitation.