Signal Confirms Targeted Phishing Attacks Resulting in Account Takeovers

Signal has confirmed an active targeted phishing campaign where attackers impersonate support (notably a fake “Signal Support Bot”) to trick high-profile users into surrendering SMS verification codes and Signal PINs, enabling unauthorized device provisioning and account takeover; Signal's infrastructure and end-to-end encryption remain uncompromised, so this is a social-engineering-driven privacy risk rather than a technical breach.