Close Menu
Best in TechnologyBest in Technology
  • News
  • Phones
  • Laptops
  • Gadgets
  • Gaming
  • AI
  • Tips
  • More
    • Web Stories
    • Global
    • Press Release

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

What's On

Is It Ever Legal—or Ethical—to Remove DRM?

24 August 2025

What Is the Magnetic Constant and Why Does It Matter?

24 August 2025

The Best White Noise Machines for a Blissful Night’s Sleep

24 August 2025
Facebook X (Twitter) Instagram
Just In
  • Is It Ever Legal—or Ethical—to Remove DRM?
  • What Is the Magnetic Constant and Why Does It Matter?
  • The Best White Noise Machines for a Blissful Night’s Sleep
  • Review: 8BitDo 64 Bluetooth Controller
  • The Hidden Ingredients Behind AI’s Creativity
  • Scientists Have Identified the Origin of an Extraordinarily Powerful Outer Space Radio Wave
  • Gear News of the Week: Always-Recording Smart Glasses, and Google Teases a New Nest Speaker
  • Security News This Week: US Government Seeks Medical Records of Trans Youth
Facebook X (Twitter) Instagram Pinterest Vimeo
Best in TechnologyBest in Technology
  • News
  • Phones
  • Laptops
  • Gadgets
  • Gaming
  • AI
  • Tips
  • More
    • Web Stories
    • Global
    • Press Release
Subscribe
Best in TechnologyBest in Technology
Home » A Signal Update Fends Off a Phishing Technique Used in Russian Espionage
News

A Signal Update Fends Off a Phishing Technique Used in Russian Espionage

News RoomBy News Room19 February 20253 Mins Read
Share Facebook Twitter Pinterest LinkedIn Tumblr Reddit Telegram Email
Share
Facebook Twitter LinkedIn Pinterest Email

For more than a decade now, Russian cyberwarfare has used Ukraine as a test lab for its latest hacking techniques, methods that often target Ukrainians first before they’re deployed more broadly. Now Google is warning of a Russian espionage trick that’s been used to obtain Ukrainians’ messages on the encrypted platform Signal—and one that both Ukrainians and other Signal users worldwide should protect themselves against with a new update to the app.

Google’s threat intelligence team on Wednesday released a report revealing how multiple hacker groups that serve Russian state interests are targeting Signal, the end-to-end encrypted messaging tool that has become widely accepted as a standard for private communications and is now often used by Ukrainians, including in the Ukrainian military’s battlefield communications. Those Russia-linked groups, which Google has given the working names UNC5792 and UNC4221, are taking advantage of a Signal feature that allows users to join a Signal group by scanning a QR code from their phone. By sending phishing messages to victims, often over Signal itself, both hacker groups have spoofed those group invites in the form of QR codes that instead hide javascript commands that link the victim’s phone to a new device—in this case, one in the hands of an eavesdropper who can then read every message the target sends or receives.

“It looks exactly like a group invite, and everything would function exactly like that, except when you scan it, it links the device out,” says Dan Black, a Google cyberespionage researcher and former NATO analyst. “It instantly pairs your device with theirs. And all your messages are now, in real time, being delivered over to the threat actor while you’re receiving them.”

Two months ago, Google began warning the Signal Foundation that maintains the private communications platform about Russia’s use of the QR code phishing technique, and Signal last week finished rolling out an update for iOS and Android designed to counter the trick. The new safeguard warns users when they link a new device and checks with them again at a randomized interval a few hours after that device is added to confirm that they still want to share all messages with it. Signal now also requires a form of authentication such as entering a passcode or using FaceID or TouchID on iOS to add a new linked device.

In fact, Signal had already been working to update those forms of phishing protections aimed specifically at exploitation of its linked device feature prior to Google’s warning, says Signal’s senior technologist, Josh Lund. But Google’s report about Russia’s spying in Ukraine provided an “acute” example of the problem that pushed them to move quickly to protect users, he says.

“We’re really grateful to the Google team for their help in making Signal more resilient to this type of social engineering,” says Lund, using the cybersecurity term for tricks that deceive victims into giving hackers sensitive information or access to their systems.

Both Google and Signal emphasized that the phishing technique Google has seen in use in Ukraine doesn’t suggest that Signal’s encryption is broken or that the app’s messages can otherwise be eavesdropped in transit. Instead, the trick essentially combines two legitimate features—QR-code group invites and QR-code device linking that pairs a smartphone with a laptop—invisibly swapping one with the other to deceive users. “Phishing is a big problem on the internet, and it’s never nice to hear that someone has fallen victim to one of these attacks,” Lund says. “But we’re trying to do our best to keep users safe, and we think these recent improvements will really help.”

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
Previous ArticleThis Lenovo ThinkPad is normally $3,229 — today it’s $1,453
Next Article News flash: Every size of the Samsung Q60D QLED TV is on sale today

Related Articles

News

Is It Ever Legal—or Ethical—to Remove DRM?

24 August 2025
News

What Is the Magnetic Constant and Why Does It Matter?

24 August 2025
News

The Best White Noise Machines for a Blissful Night’s Sleep

24 August 2025
News

Review: 8BitDo 64 Bluetooth Controller

24 August 2025
News

The Hidden Ingredients Behind AI’s Creativity

24 August 2025
News

Scientists Have Identified the Origin of an Extraordinarily Powerful Outer Space Radio Wave

24 August 2025
Demo
Top Articles

ChatGPT o1 vs. o1-mini vs. 4o: Which should you use?

15 December 2024105 Views

Costco partners with Electric Era to bring back EV charging in the U.S.

28 October 202495 Views

5 laptops to buy instead of the M4 MacBook Pro

17 November 202488 Views

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Latest News
News

Scientists Have Identified the Origin of an Extraordinarily Powerful Outer Space Radio Wave

News Room24 August 2025
News

Gear News of the Week: Always-Recording Smart Glasses, and Google Teases a New Nest Speaker

News Room23 August 2025
News

Security News This Week: US Government Seeks Medical Records of Trans Youth

News Room23 August 2025
Most Popular

The Spectacular Burnout of a Solar Panel Salesman

13 January 2025129 Views

ChatGPT o1 vs. o1-mini vs. 4o: Which should you use?

15 December 2024105 Views

Costco partners with Electric Era to bring back EV charging in the U.S.

28 October 202495 Views
Our Picks

Review: 8BitDo 64 Bluetooth Controller

24 August 2025

The Hidden Ingredients Behind AI’s Creativity

24 August 2025

Scientists Have Identified the Origin of an Extraordinarily Powerful Outer Space Radio Wave

24 August 2025

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Facebook X (Twitter) Instagram Pinterest
  • Privacy Policy
  • Terms of use
  • Advertise
  • Contact Us
© 2025 Best in Technology. All Rights Reserved.

Type above and press Enter to search. Press Esc to cancel.