Privacy

2479 readers

384 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

Be civil and no prejudice
Don't promote big-tech software
No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
No reposting of news that was already posted
No crypto, blockchain, NFTs
No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 6 months ago

MODERATORS

[email protected]

Warning over privacy of encrypted messages as Russia targets Signal Messenger (www.computerweekly.com)

submitted 3 months ago* (last edited 3 months ago) by [email protected] to c/[email protected]

9 comments fedilink hide all child comments

A lot of people seem to be confused so to clear up: They haven't broken encryption. They are phishing using malicious QR codes.

Russia-backed hacking groups have developed techniques to compromise encrypted messaging services, including Signal, WhatsApp and Telegram, placing journalists, politicians and activists of interest to the Russian intelligence service at potential risk.

Google Threat Intelligence Group disclosed today that Russia-backed hackers had stepped up attacks on Signal Messenger accounts to access sensitive government and military communications relating to the war in Ukraine.

Analysts predict it is only a matter of time before Russia starts deploying hacking techniques against non-military Signal users and users of other encrypted messaging services, including WhatsApp and Telegram.

you are viewing a single comment's thread
view the rest of the comments

[–] evilcultist 77 points 3 months ago (2 children)

To be clear: these are phishing techniques. They aren’t breaking the encryption, they’re getting the user to let them in.

[–] [email protected] 13 points 3 months ago

That’s good to know! I was worried they were breaking the encryption.

[–] [email protected] 8 points 3 months ago (1 children)

Yes; they are not breaking it, but they have developed malicious QR codes, which the user expects to be the link device QR, but is actually giving them access to their messages.

Russia-backed hackers are attempting to compromise Signal’s “linked devices” capability, which allows Signal users to link their messaging account to multiple devices, including phones and laptops, using a quick response (QR) code.

Google threat analysts report that Russia-linked threat actors have developed malicious QR codes that, when scanned, will give the threat actor real-time access to the victim’s messages without having to compromise the victim’s phone or computer.

[–] [email protected] 5 points 3 months ago (1 children)

Who is scanning random qr codes into signal?

[–] [email protected] 4 points 3 months ago

I scam every one I see