The FBI and CISA warn that a phishing campaign tied to Russian Intelligence Services is now targeting Signal users to steal Backup Recovery Keys. If successful, the attackers can restore victims’ backups on their own devices and read historical messages, including private and group chats. #Signal #FBI #CISA #UNC5792 #UNC4221 #FSB
Keypoints
- Russian Intelligence Services are behind a phishing campaign against Signal users.
- The attackers impersonate Signal support to steal Backup Recovery Keys.
- Stolen keys let attackers restore Signal backups on their own devices.
- Victims’ historical messages, including private and group chats, can be exposed.
- FBI and CISA advise users to report incidents to IC3, the FBI, or CISA.