Russian Hackers Target Signal Users with Phishing for Backup Recovery Keys
ID: ed973512-f5c6-51d1-83ee-6e0deef9b470
STIX ID: report--ed973512-f5c6-51d1-83ee-6e0deef9b470
Feed Name: ThreatCluster
Threat Score
The FBI and CISA alert reports a targeted phishing campaign by Russian Intelligence Services impersonating Signal support to steal Backup Recovery Keys and obtain historical messages from high-value targets—particularly government officials and journalists (notably in Ukraine). The advisory urges users to generate new Backup Recovery Keys and notes the activity is tracked as UNC5792 and UNC4221.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.