Signal enhances security with new features to combat phishing attacks

Signal has introduced new in-app confirmations and warning messages to bolster defenses against phishing and social engineering tactics that can lead to fraud. These measures aim to create a pause for users to assess the legitimacy of external requests, as reported by Bleeping Computer.

The messaging app is implementing several new features to protect users from scams, particularly those impersonating Signal Support. Recent attacks, linked by the FBI and Dutch and German authorities to Russian state-sponsored hackers, have exploited the Linked Device feature. Attackers convince victims to scan QR codes or share one-time codes, allowing them to link their device to the target's account and access chats and contacts.

The new protections include a "Name not verified" label for new contacts, a prompt to confirm message requests with reminders not to share registration codes or PINs, enhanced safety tips, and explicit warnings against responding to messages claiming to be from Signal Support. Users are advised to remain vigilant for suspicious messages, verify linked devices in settings, and never share sensitive account information.

Source: Bleeping Computer