Russian Hackers Are Targeting Signal Backup Keys to Read Your Messages

Russian intelligence groups are running a sophisticated phishing campaign targeting Signal users, and they've added a dangerous new twist. The FBI and CISA updated their warning in March: attackers are now tricking people into handing over their Signal Backup Recovery Keys, which unlocks access to encrypted message history.

The Details

Signal has earned its reputation as one of the most secure messaging apps available. Messages are encrypted end to end, meaning even Signal can't read them. Many users enable the backup feature to save their message history, which creates a special recovery key.

Here's where the attack gets clever. Russian intelligence operatives are sending convincing phishing messages that appear to come from Signal or related security services. These fake messages claim there's a problem with your account or that you need to verify your backup. They ask you to enter your Signal Backup Recovery Key on a fake website that looks legitimate.

Once attackers have your backup key, they can access your entire encrypted message history. This isn't a theoretical risk. The FBI and CISA don't issue warnings like this unless they're seeing active attacks affecting real people. The attackers are specifically targeting individuals they believe have sensitive information: journalists, activists, government workers, and their contacts.

Who Is Affected

Anyone using Signal with the backup feature enabled could be targeted. Russian intelligence typically focuses on high value targets first, but these campaigns often expand. If you've ever discussed sensitive topics on Signal, work in government, journalism, or advocacy, or communicate with people who do, you should take this seriously.

Family members of targeted individuals are also at risk. Attackers know that spouses, parents, and children often share sensitive information. Even if you don't think you're interesting to foreign intelligence, your contacts might be.

What You Should Do Right Now

Never share your Signal Backup Recovery Key with anyone. Signal will never ask for it via email, text, or direct message. Write this key down and store it somewhere physical and private.

Check where your Signal backups are stored. Open Signal, go to Settings, then Chats and Media. Review your backup settings and confirm the location looks correct.

Enable registration lock in Signal. Go to Settings, then Account, then Registration Lock. This adds an extra PIN requirement that stops attackers from registering your number on a new device.

Verify contacts using Safety Numbers. Before discussing sensitive topics, tap on a contact's name, select "View Safety Number," and verify the number matches through a separate channel like a phone call.

Report suspicious messages immediately. If you receive any message asking for your backup key, screenshot it and report it to Signal support and your IT department if you have one.

The Bigger Picture

This attack represents a shift in how sophisticated adversaries are targeting encrypted communications. They're not breaking the encryption itself. They're using social engineering to trick people into handing over the keys voluntarily. As more people adopt secure messaging apps for legitimate privacy reasons, attackers are adapting their techniques.

Staying informed about these evolving threats is your best defense. Cybersecurity isn't about buying expensive software. It's about understanding how attacks work and building simple habits that keep you safe.

How GetCyberRight Can Help

Our GCR Scam Guard tool helps you identify phishing attempts before you fall victim. It's specifically designed to catch sophisticated attacks targeting messaging app credentials and backup keys. Scam Guard analyzes suspicious messages and websites, giving you clear guidance on whether a request is legitimate. Think of it as having a cybersecurity expert looking over your shoulder, helping protect your family's private communications.

Russian Hackers Are Targeting Signal Backup Keys to Read Your Messages