technology
Phishing campaign targets Signal users for recovery keys
A hacking effort is attempting to obtain Signal users' secret recovery keys that unlock cloud message backups. The campaign uses phishing tactics to trick recipients into disclosing the keys.
May 28, 3:07 PM·1m read1 source
androidheadlines.comAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
A phishing campaign is underway that seeks Signal users' secret recovery keys. The keys can unlock online backups that store past messages. The campaign contacts users and attempts to persuade them to reveal the recovery key.
Once obtained, the key allows access to stored message history. Signal stores encrypted backups in the cloud that require the recovery key for decryption. Users who lose the key cannot retrieve those backups.
Transparency
How sources framed this
Single source — no framing comparison available.
CorroborationModerate · 1 source
