Phishing Alert - Russians Posing as Signal Support

What Happened

Russian intelligence-affiliated groups are launching phishing attacks by posing as customer support for the secure messaging app Signal. The FBI and CISA issued a warning about these deceptive tactics aimed at individuals with high intelligence value, such as former government officials, military personnel, and journalists. By masquerading as trusted support, attackers have compromised thousands of accounts, allowing them to read messages and gather sensitive information from victims' contact lists.

Victims receive messages claiming there is suspicious activity on their accounts. These messages prompt users to click a link for verification, which can lead to account takeover if they provide credentials or two-factor authentication (2FA) codes. Despite Signal's reputation for strong end-to-end encryption, the effectiveness of this security can be undermined if users inadvertently invite attackers in.

Who's Being Targeted

The phishing campaign primarily targets individuals with significant intelligence value. This includes:

• Former government officials
• Military figures
• Politicians
• Journalists

These individuals often have access to sensitive information, making them attractive targets for espionage. The attackers' ability to compromise these accounts not only jeopardizes personal privacy but also poses risks to national security and public safety.

Signs of Infection

Victims of these phishing attacks may notice several signs:

• Unexpected messages from Signal support requesting verification.
• Account access issues, such as being logged out or unable to access messages.
• Unusual activity in their contact lists or sent messages.

If you encounter any of these signs, it is crucial to take immediate action to secure your account and personal information. The FBI and CISA recommend standard anti-phishing practices to help mitigate risks.

How to Protect Yourself

To safeguard against these phishing attempts, consider the following steps:

• Verify communications: Always double-check the authenticity of messages claiming to be from support services.
• Enable two-factor authentication: This adds an extra layer of security to your accounts.
• Educate yourself about phishing: Understanding the signs of phishing can help you avoid falling victim.
• Report suspicious activity: If you suspect you have been targeted, report it to the relevant authorities.

By staying vigilant and informed, you can help protect yourself from these deceptive tactics and maintain the integrity of your communications.