Russian intelligence operatives are phishing not only Signal accounts but also their backup recovery keys — a single compromised key enables permanent access to all messages and account takeover.
Meta connected its support chatbot directly to critical account management functions, giving attackers an easy way to hijack accounts without authorization.