3 ms·
> In each of the fake group invites, JavaScript code that typically redirects the user to join a Signal group has been replaced by a malicious block containing
by aembleton 2y ago
> In each of the fake group invites, JavaScript code that typically redirects the user to join a Signal group has been replaced by a malicious block containing the Uniform Resource Identifier (URI) used by Signal to link a new device to Signal (i.e., "sgnl://linkdevice?uuid="), tricking victims into linking their Signal accounts to a device controlled by UNC5792.
Missing from their recommendations: Install No Script: https://noscript.net/ https://noscript.net/
- cassepipe 2y agoNo Script is a browser extension. Signal is an Android/Ios/Electron app so no
- aembleton 2y agoIn each of the fake group invites, JavaScript code that typically redirects the user to join a Signal group has been replaced by a malicious block containing the Uniform Resource Identifier (URI) used by Signal to link a new device to Signal (i.e., "sgnl://linkdevice?uuid="), tricking victims into linking their Signal accounts to a device controlled by UNC5792. Source: https://cloud.google.com/blog/topics/threat-intelligence/russia-targeting-signal-messenger https://cloud.google.com/blog/topics/threat-intelligence/rus...