FBI and CISA warn Russian phishing campaign targets Signal backup recovery keys (bleepingcomputer.com)

• Russian intelligence phishing campaign now targets Signal Backup Recovery Keys.
• Attackers impersonate Signal support to trick users into revealing keys.
• Compromised keys allow access to all backed-up messages; generating a new key does not retroactively protect previously downloaded backups.

"The FBI and CISA updated a March 2026 advisory, warning that a phishing campaign attributed to Russian intelligence services (RIS) now targets Signal Backup Recovery Keys. Attackers impersonate Signal support, tricking users into revealing keys that allow access to historical messages. Targets include government officials, military, journalists, and Ukrainian personnel."