SIGNAL USERS TARGETED IN BACKUP KEY PHISHING CAMPAIGN

The campaign targets users by attempting to trick them into revealing their recovery keys—credentials that unlock backups containing past conversations. Signal's backup feature allows users to store encrypted message histories in the cloud. The recovery key serves as the master credential for accessing these backups. If compromised, attackers gain access to potentially sensitive historical messages. The phishing attacks use social engineering tactics to manipulate users into voluntarily disclosing their keys. Security researchers recommend users: - Never share recovery keys with anyone, including Signal support staff - Be suspicious of unsolicited messages requesting credentials - Verify requests through official Signal channels - Store recovery keys securely offline Signal has not released details on the attack's scale or distribution method. The messaging platform emphasizes that legitimate requests for recovery keys should raise immediate red flags, as authorized personnel never ask users to share them.