Post #1735309
2026-04-27 20:55 UTC
Because we don’t collect user data, what we know about these attacks comes from the victims of phishing. And from what victims have told us, the attacks followed a broad pattern: after tricking people into revealing their Signal credentials, attackers then used those credentials to take over their account and also frequently changed the associated phone number. 4/
Replies (2)
-
@signalapp@mastodon.world 2026-04-27 20:55
Because such a change results in de-registering your Signal accounts, attackers prepared people for this by telling them that being de-registered was intended behavior, and that all they would need to do is “re-register,” or, create a new account. When they moved to create a new Signal account — one that was now decoupled from their hijacked account — the victims thought they were logging back in to their primary account. 5/
-
@hsza@social.tudbut.de 2026-04-28 12:59
@signalapp@mastodon.world community note: Signal collects phone numbers