Czech cybersecurity agency warns of Russian-linked attacks on Signal accounts

Czechia’s National Cyber and Information Security Agency has warned of attempts to gain access to accounts on the encrypted messaging app Signal. According to the agency, the attacks are primarily associated with actors linked to Russia and mainly target politicians, government officials and security experts, although any user could become a victim. Attackers do not try to break Signal’s encryption but use social engineering to persuade users to link an unknown device to their account or reveal their PIN. Methods include fake Signal support messages, malicious links and fraudulent QR codes disguised as invitations to groups.