Fraudsters are attempting to gain access to 'Signal' user accounts by misleading them into providing verification codes, as reported by Cert.lv in Latvia.
In Latvia, there have been reported attempts by fraudsters to acquire access to 'Signal' user accounts by tricking users into handing over their verification codes. The Information Technology Security Incident Prevention Institution, known as Cert.lv, stated that these attacks are not related to any new vulnerabilities in the 'Signal' application and that the app itself remains secure. The concern grows as scammers impersonate the 'Signal Security Support Chatbot', sending messages purportedly concerning unauthorized activities on user accounts or changes in usage terms.
Users are being misled into believing they are communicating with legitimate support when, in fact, these fraudsters ask them to provide verification codes and PINs. If users willingly share this information, the scammers can take complete control of their accounts, change the associated phone numbers to their own, and effectively lock users out of their accounts. Cert.lv emphasizes that 'Signal's support team never contacts users through the messaging app, and the fake chatbot they reference does not exist, serving as a clear warning for users to be vigilant.
This incident highlights the importance of cybersecurity awareness as scams become more sophisticated. Users are advised to remain cautious and informed about such phishing attempts, especially in light of the assurances from Cert.lv regarding the ongoing security of the 'Signal' application. Enhancing users' understanding of how official communication should occur is critical in preventing such scams from being successful.
