New phishing campaign targets Signal users to steal chat backup recovery keys

Summary

Hackers are targeting Signal users in a new phishing campaign that attempts to steal their chat backups. The attackers pose as Signal's support team, warning victims that their backed-up chats and media are at risk of permanent loss due to a sync issue, and trick them into sharing their recovery key. This key can then be used to access online backups containing past messages. The campaign was highlighted by Washington Post analyst Josh Rogin, who shared a screenshot of the attack.