Signal Phishing Campaign Targets Journalists and Activists to Steal Backup Recovery Keys

A targeted phishing campaign impersonates Signal Support and pressures users to paste their 64-character Secure Backup recovery keys into chats; if obtained, attackers can download and decrypt entire archived message histories. The campaign has reportedly targeted journalists, activists and high-profile German officials and is linked in reporting to suspected state-sponsored espionage, illustrating a high-impact social-engineering technique that compromises past as well as future messages.