Get the latest tech news

A Signal Update Fends Off a Phishing Technique Used in Russian Espionage


Google warns that hackers tied to Russia are tricking Ukrainian soldiers with fake QR codes for Signal group invites that let spies steal their messages. Signal has pushed out new safeguards.

“We're really grateful to the Google team for their help in making Signal more resilient to this type of social engineering,” says Lund, using the cybersecurity term for tricks that deceive victims into giving hackers sensitive information or access to their systems. In some cases, Sandworm's hackers have also aided front-line Russian troops in off-loading Signal messages from captured devices, including by using the linked-device feature to pair compromised phones with their own PCs. In December, for instance, US officials recommended Americans use end-to-end encrypted apps in response to the Chinese hacker group Salt Typhoon's widespread penetrations of US telecom networks.

Get the Android app

Or read this on Wired

Read more on:

Photo of Russian

Russian

Photo of phishing technique

phishing technique

Photo of signal update fends

signal update fends

Related news:

News photo

Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

News photo

If you dread a Microsoft Teams invite, just wait until it turns out to be a Russian phish

News photo

What is device code phishing, and why are Russian spies so successful at it?