this post was submitted on 23 Feb 2025
66 points (91.2% liked)

Privacy

901 readers
345 users here now

Protect your privacy in the digital world

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be nice, civil and no bigotry/prejudice.
  2. No tankies/alt-right fascists. The former can be tolerated but the latter are banned.
  3. Stay on topic.
  4. Don't promote proprietary software.
  5. No crypto, blockchain, etc.
  6. No Xitter links. (only allowed when can't fact check any other way, use xcancel)
  7. If in doubt, read rule 1

Related communities:

founded 3 months ago
MODERATORS
fxomt@lemmy.dbzer0.com
otter@lemmy.ca
shaytan@lemmy.dbzer0.com
fxomt@piefed.social
66
Warning over privacy of encrypted messages as Russia targets Signal Messenger (www.computerweekly.com)
submitted 14 hours ago* (last edited 5 hours ago) by fxomt@lemmy.dbzer0.com to c/privacy@lemmy.dbzer0.com
9 comments fedilink hide all child comments
 

A lot of people seem to be confused so to clear up: They haven't broken encryption. They are phishing using malicious QR codes.

Russia-backed hacking groups have developed techniques to compromise encrypted messaging services, including Signal, WhatsApp and Telegram, placing journalists, politicians and activists of interest to the Russian intelligence service at potential risk.

Google Threat Intelligence Group disclosed today that Russia-backed hackers had stepped up attacks on Signal Messenger accounts to access sensitive government and military communications relating to the war in Ukraine.

Analysts predict it is only a matter of time before Russia starts deploying hacking techniques against non-military Signal users and users of other encrypted messaging services, including WhatsApp and Telegram.

you are viewing a single comment's thread
view the rest of the comments
[–] empireOfLove2@lemmy.dbzer0.com 11 points 12 hours ago

Security is only as good as it's weakest link, which is almost always the end user. These attacks do not compromise Signal the protocol (e.g seeing in-flight data), they are focusing on hijacking account information to gain access.