So how did the Russians do it? In my case, it began with a message that popped up on my Signal account on May 29 stating it was from “Signal Support” with the blue-rounded circle that is Signal’s signature logo.
“We found logging in to your account from a new device,” it read. “If it wasn’t you, write, ‘it’s not me’ in the chat and follow the further recommendations.” These included instructions on how to enter my “recovery key”— a long hodgepodge of random letters and numbers that are apparently unique to each users’ account.
At first, I didn’t respond. But then, four days later, on June 3, I got a follow up “Signal Support” message that got my attention. “Warning,” it read. “You did not enter your recovery key. Your account will be deleted.”
Not wanting to lose access to an account I believed to be secure and regularly use, I stupidly did what the bogus Signal Support team recommended, including the final step: “Paste the key here immediately to keep your account.”
They’re a dumbass.
So how did the Russians do it? In my case, it began with a message that popped up on my Signal account on May 29 stating it was from “Signal Support” with the blue-rounded circle that is Signal’s signature logo.
“We found logging in to your account from a new device,” it read. “If it wasn’t you, write, ‘it’s not me’ in the chat and follow the further recommendations.” These included instructions on how to enter my “recovery key”— a long hodgepodge of random letters and numbers that are apparently unique to each users’ account.
At first, I didn’t respond. But then, four days later, on June 3, I got a follow up “Signal Support” message that got my attention. “Warning,” it read. “You did not enter your recovery key. Your account will be deleted.”
Not wanting to lose access to an account I believed to be secure and regularly use, I stupidly did what the bogus Signal Support team recommended, including the final step: “Paste the key here immediately to keep your account.”