Russian intelligence operatives are phishing not only Signal accounts but also their backup recovery keys — a single compromised key enables permanent access to all messages and account takeover.