Attempt to hijack Signal accounts through SMS service provider Twilio compromise
Developers of the open messenger Signal have disclosed information about a targeted attack aimed at gaining control over some users' accounts. The attack was carried out through a breach of the Twilio service, which is used by Signal to send SMS messages with confirmation codes. Data analysis indicated that the Twilio breach may have affected around 1900 Signal user phone numbers, for which attackers had the ability to re-register the numbers […]
