The original post: /r/privacy by /u/lyfeflight on 2025-03-12 17:07:09.

“Speaking to Recorded Future News on the sidelines of the Kyiv cyber forum, Demediuk said that Ukraine used ‘an official communication channel’ to reach out to Signal about how the app is being abused by Russians, including for phishing attacks and account takeovers targeting Ukrainian users. Previously, the company responded to such requests, but that is no longer the case.

‘This is a threat to us,’ Demediuk said. ‘When a messenger we trusted and relied on fails us, it becomes a problem.’

Ukraine and Western researchers have previously warned about attacks conducted by Russia-linked threat actors through Signal.

In a report published in February, Google’s security team warned that Russian state-backed hackers are increasingly targeting Signal accounts, including those used by Ukrainian military personnel and government officials, in an effort to access sensitive information that could aid Moscow’s war effort.

In these attacks, hackers typically use phishing messages to infect targeted devices with spyware. Another technique involves abusing Signal’s legitimate ‘linked devices’ feature, which allows the app to be used on multiple devices simultaneously — delivering messages in real time to both the victim and the attacker.”