Tag: messaging apps
14 articles

Eavesdroppers Exploit Device Linking to Tap WhatsApp, Signal Accounts
Germany's Customs Office has successfully used device linking to tap into WhatsApp and Signal accounts by connecting a police-controlled computer to a suspect's account, exploiting a feature meant for convenience. This technique allows authorities to intercept messages without cracking encryption, raising concerns about digital security.

Signal Bolsters Backup Security with Encrypted Local Storage Rollout
Signal just got a major security boost with its 8.30 update, rolling out end-to-end encrypted local storage across all platforms, giving you rock-solid protection for your chat history. You now have two flexible options for storing your backups, with seamless support on Android, iOS, Linux, macOS, and Windows.

Telegram Flaw Exposes User Messages via Hidden JavaScript in HTML Exports
A security flaw in Telegram Desktop's HTML export feature allowed hidden JavaScript to be embedded in exported chat pages, putting user messages at risk - and thankfully, it's now fixed!

Russians Target Signal Users with Phishing Attacks
Stay vigilant, especially on holidays like Labor Day - even company staff aren't immune to unexpected messages, as Nightwing's CEO recently proved when a message meant for employees somehow made its way to The Register. This incident serves as a reminder to always be cautious when receiving unsolicited messages.

WhatsApp Deploys On-Device AI to Flag Potential Scam Messages
Meet Scam Alert, WhatsApp's new on-device AI feature that helps you spot potential scam messages - and take action to protect yourself. This optional feature flags suspicious messages from unknown senders, giving you the power to block, report, or ignore them.

WhatsApp Scam Exploits Linked Devices Feature to Hijack Accounts
Beware of a sneaky WhatsApp scam that's hijacking accounts by tricking you into voting for a friend - but actually hands over control to attackers. One wrong click can let scammers take over your account, and you might not even get a password reset alert.

India Warns WhatsApp Over Username Rollout Citing Security Risks
India's Ministry of Electronics and Information Technology has warned WhatsApp to halt its global rollout of a new usernames feature, citing security risks, and given the Meta-owned platform just three days to respond. The move has sparked concerns over regulatory action and the protection of user data.

WhatsApp Introduces Usernames to Enhance User Privacy
WhatsApp is rolling out a new feature that lets you reserve a unique username, giving you more control over your privacy and allowing you to keep your phone number hidden. This move is all about putting you in the driver's seat, letting you choose how you connect with others on the platform.

WhatsApp VBScript Campaign Targets Global Users with RMM Software
Malicious actors are targeting WhatsApp users worldwide with a sneaky VBScript campaign, compromising accounts to spread harmful files through direct messages. In a shocking concentration of attacks, 80% of victims were in Malaysia, highlighting the need for users to stay vigilant.

NSO Group Defies Court Order, Continues Targeting WhatsApp Users
Despite a court order blocking it from doing so, NSO Group continues to target WhatsApp users, defying the ruling and putting users at risk. The company is fighting to overturn the order, claiming it will suffer harm if it's forced to comply.

Signal Warns UK Plan to Scan Devices for Nude Images Threatens Global Surveillance
Signal is sounding the alarm on the UK's plan to scan devices for nude images, warning that it threatens global surveillance and undermines the trust that underpins private communications. The encrypted messaging platform is urging caution, saying the proposed mechanism is not only ineffective in keeping children safe, but also dangerously dystopian.

Poland Shifts Officials to State Messaging App Citing Security Concerns
Poland is swapping out Signal for a state-developed messaging app touted as more secure, amid rising concerns over targeted social engineering attacks on government officials. The move marks a significant shift in how officials communicate, prioritizing security over popular choice.

Signal Bolsters Defenses Against Social Engineering, Phishing Attacks
Stay one step ahead of scammers with Signal's latest update, designed to help you spot fake profiles and phishing attempts with added confirmations and warning messages. You'll now see a "Name not verified" label and get richer safety tips to make sure you're chatting with the real deal.

Telegram Abused for Crypto Scams and Android Malware Delivery
Researchers uncovered a massive scam operation, dubbed FEMITBOT, that uses Telegram's Mini Apps to spread fake crypto platforms, brand impersonations, and Android malware, with a single API string tying it all together. Victims are lured in with a convincing, app-like interface that tricks them into divulging sensitive info.