FBI: Russian Intelligence Phishing for Signal Recovery Keys — How to Protect Your Account

Colleagues — a heads-up for cybersecurity professionals: the FBI and CISA have updated an advisory — Russian groups are phishing for Signal Backup Recovery Keys.

What matters:
- Never paste your Recovery Key, SMS codes, or PIN into a chat — no legitimate service will ask for them.
- Review Linked Devices and remove any unfamiliar entries.
- If your key may have been disclosed, generate a new Recovery Key and treat prior backups as compromised.

Why it matters: an attacker with the key can restore your archive and take over the account even though encryption remains intact.

How do you secure critical messaging apps?

#cybersecurity #Signal #phishing #infosec