FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys

The FBI and CISA have updated a previous warning about Russian intelligence phishing Signal accounts, noting that the attackers have added a new step to their tactics. The operators are now attempting to trick targets into revealing their Signal Backup Recovery Key. If a target hands over this key, the attacker can restore the account's backup and access private and group message history, effectively taking over the account. The key remains functional even after it has been used, allowing the attacker to maintain access. This updated tactic allows the attackers to gain more extensive control over compromised accounts.