Post by @signalapp@mastodon.world

2026-04-27 20:55 UTC

Because we don’t collect user data, what we know about these attacks comes from the victims of phishing. And from what victims have told us, the attacks followed a broad pattern: after tricking people into revealing their Signal credentials, attackers then used those credentials to take over their account and also frequently changed the associated phone number. 4/

Replies (3)

@signalapp@mastodon.world 2026-04-27 20:55

Because such a change results in de-registering your Signal accounts, attackers prepared people for this by telling them that being de-registered was intended behavior, and that all they would need to do is “re-register,” or, create a new account. When they moved to create a new Signal account — one that was now decoupled from their hijacked account — the victims thought they were logging back in to their primary account. 5/

Open ##1735310
@hsza@social.tudbut.de 2026-04-28 12:59

@signalapp@mastodon.world community note: Signal collects phone numbers

Open ##3266509
@Cenabro@mastodon.social 2026-10-24 08:44

@signalapp@mastodon.world Hello Signal team, I noticed a gap in the dotted outline of the speech bubble in your app icon. Could you make the outline continuous, with no gaps? It may seem like a small detail, but a polished logo can make a strong impression and help attract more users.

Open ##5257303