Russian hackers compromised Signal accounts of Ukrainian users

Russian hackers targeted Signal accounts in Ukraine before US officials used the app to discuss military plans. In a report, Google researchers revealed that Russia's military intelligence service, the GRU, had compromised several accounts on Signal, a messaging app known for its security. The hack involved different methods to deceive users. For example, hackers tricked people into scanning malicious QR codes, which linked their Signal account to the hackers' devices. Another tactic was to send fake links that appeared to invite users to join Signal groups. Clicking these links also connected victims to the hackers. This security breach raised concerns as top US officials had used Signal just days later to discuss plans for an attack on the Houthis in Yemen. Vice President JD Vance and other officials shared sensitive information, including details about weapons and targets. The discussion included a journalist, raising questions about security protocols. Despite being praised for its end-to-end encryption, Signal is not officially sanctioned by the US government for national security discussions. Experts noted that while the app itself wasn't hacked, users could easily be misled, making it risky to use for sensitive communication. The attackers, known as "APT44," have a history of cyberattacks against Ukraine, including significant incidents in 2015 and 2017. These breaches highlight the vulnerabilities that exist even with trusted apps like Signal. The incident showed that there are strict guidelines for secure communications among US officials. Meetings typically require attendees to leave their phones outside. By discussing operations on Signal and including a journalist, officials risk violating these protocols and potentially facing legal consequences. The situation underscores the importance of using secure and authorized methods for communicating sensitive information.