An attack on the company providing the two-factor authentication service singal led to the depreciation of ca 1900 bills messaging application.
Signal is an app that provides secure messaging from cryptography and with an eye for privacy. It uses Open Whisper, the same protocol used by WhatsApp.
The hackers gained access to the management console of Twilio, a third-party company that provides signal verification services. In this way, the hackers were then able to send various messages from phishing to employees and managers of the two companies.
Hackers would then be able to obtain information from about 1900 accounts. Fortunately, this is a rather meager loot: precisely because, just like on WhatsApp, all user conversations don’t go through Signal’s servers unencrypted, the hackers only had access to the users’ phone numbers and nothing else.
The attack was discovered on August 8, and both companies have since restored full security to their respective operations. Signal has already warned the affected users.
Source: Lega Nerd
