FBI warns Russian spies now steal Signal backup recovery keys
The FBI and CISA have updated their advisory to flag a new phishing step: Russian intelligence actors are coaxing Signal users into revealing their Backup Recovery Key. That key lets attackers restore the entire account and read historic messages, essentially bypassing Signal’s end‑to‑end encryption. Users must generate a new recovery key immediately to block future access.