Hackers Linked to State Actors Target Signal Messages of Military Officials and Journalists

Germany's BfV and BSI warn of a state-sponsored espionage campaign targeting high-value officials and journalists by hijacking Signal accounts through two social-engineering methods: (1) impersonating Signal support to obtain verification PINs and register the victim's number on attacker-controlled devices, and (2) tricking victims into scanning QR codes to silently link attacker devices and read messages for up to 45 days. Authorities urge users to check Signal's Linked Devices and never share verification codes.