Archive — US — techcrunch
Hackers are trying to steal Signal users’ backups in new wave of phishingattacks
Hackers are targeting Signal users with a new phishing campaign aimed at stealing chat backups by impersonating Signal's support team. Victims are tricked into sharing their recovery keys, which hackers use to access sensitive data. Signal reiterates it never contacts users for such information, highlighting an ongoing trend of cyberattacks against activists and users of encrypted messaging services.
Key points
- Hackers impersonate Signal's support team to trick users into sharing recovery keys.
- Victims receive messages claiming their chat backups are at risk due to a sync issue.
- Sharing recovery keys could lead to account access and data theft.
- Signal has warned users that it will never reach out for sensitive information.
- Previous hacking methods targeted account hijacking rather than backup theft.
Why it matters
- The rise in cyberattacks targeting messaging apps reflects increasing threats against privacy in the digital age.
- Phishing attacks have been a common strategy in cybercrime, often targeting activists and journalists.
- The evolution of Signal's security features demonstrates the ongoing arms race between cybersecurity measures and hackers.
- As more users rely on encrypted messaging to communicate, the importance of user vigilance against phishing attempts continues to grow.
This phishing campaign underscores the critical need for awareness and security practices among users of encrypted messaging apps, especially in a landscape rife with cyber threats targeting vulnerable groups.