A suspected espionage campaign aimed at Signal users shows how phishing, account abuse, and device linking can threaten a secure messenger without breaking its encryption.
A phishing campaign aimed at verification codes and account PINs shows how secure messaging can still be undermined at the account boundary.
A phishing operation linked to Russian intelligence services has shifted from stealing login prompts to hunting the secret that can unlock Signal backup history.
A support impersonation campaign is trying to turn one secret - the backup recovery key - into access to encrypted chat archives.
New in-app confirmations and warning messages are a UX-layer defense meant to slow users down before a deceptive prompt turns into fraud.
A new FBI and CISA alert exposes Russian intelligence’s cunning scheme to bypass encryption and infiltrate encrypted messaging apps-by tricking the people who use them.