Flutterby™! : Signal, QR codes, & joining groups

Beware QR codes and joining groups: Wired: A Signal Update Fends Off a Phishing Technique Used in Russian Espionage

Google warns that hackers tied to Russia are tricking Ukrainian soldiers with fake QR codes for Signal group invites that let spies steal their messages. Signal has pushed out new safeguards.

Google Threat Intelligence Group: Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger

Via Michał "rysiek" Woźniak · 🇺🇦 @rysiek@mstdn.social who notes:

👉 No, Signal has not been compromised

👉 No, Signal encryption has not been broken

👉 No, there is no back-door in Signal

You should continue using Signal. The update is responding to a sophisticated, state-level attack targeting specific groups.