Privacy

48976 readers

1137 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago

MODERATORS

Hackers are trying to steal Signal users' backups in new wave of widespread attacks (techcrunch.com)

submitted 1 week ago by kat@lemmy.blehiscool.com to c/privacy@lemmy.ml

2 comments fedilink hide all child comments

TLDR: A new, widespread wave of cyberattacks is actively targeting Signal users, specifically aiming to compromise and steal account backups. Because Signal chats are end-to-end encrypted on device, hackers are shifting focus to where that data might be stored less securely (like cloud backups or via phishing/credential stuffing attacks to gain account access).

you are viewing a single comment's thread
view the rest of the comments

[–] kat@lemmy.blehiscool.com 15 points 1 week ago* (last edited 1 week ago)

Phishing actually is a core branch of hacking—specifically under Social Engineering. It's not really like walking through an unlocked door; it's more like a con artist dressing up as a locksmith and convincing the homeowner to hand over the keys.

Hacking applies to the entire attack surface, which includes the human element, further more there are whole phishing campaigns that are heavily automated and often deliver stealer malware, making them a full cyber attack.

This wasn’t a technical compromise of Signal itself, but phishing/social engineering is still a form of hacking.