zCat on Nostr: Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR ...

Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR Codes

"In the attacks spotted by the Google Threat Intelligence Group, the threat actors, including one it's tracking as UNC5792, have resorted to malicious QR codes that, when scanned, will link a victim's account to an actor-controlled Signal instance.

As a result, future messages get delivered synchronously to both the victim and the threat actor in real-time, thereby granting threat actors a persistent way to eavesdrop on the victim's conversations. Google said UAC-0195 partially overlaps with a hacking group known as UAC-0195."

See more:
https://thehackernews.com/2025/02/hackers-exploit-signals-linked-devices.html

#security #privacy #signal