FBI and CISA warn that Russian hackers now target Signal backup keys.
The FBI and CISA updated their warning about a Russian intelligence-linked phishing campaign targeting Signal users. The campaign now tries to trick victims into handing over Signal Backup Recovery Keys, which can allow attackers to restore and read backed-up message history. Targets include current and former U.S. and international government officials, military personnel, political figures, journalists, and key officials in Ukraine. The attackers impersonate messaging-app support and claim that users must enable or verify backups after alleged attacks. The agencies warn that creating a new Signal account with the same phone number does not invalidate a stolen recovery key; users must generate a new key in Signal settings.