News for hackers. Stuff that matters.

A comment on Multiple Russia-aligned threat actors actively targeting Signal Messenger. Parent comment

Re:Multiple Russia-aligned threat actors actively targeting ... by reactordev on Wednesday February 19, 2025 @03:55PM (#43107534)
“Just install this chrome browser extension” is all it takes now. Hell, you can even access cookies and previously visited sites from within the browser. All it takes is some funky ad, or chrome extension, or some llama-powered toolbar to gain access to be able to do exactly that.

Background services on devices has been a thing for a while too. Install an app (which you grant all permissions to when asked) and bam, a self-restarting daemon service tracking your location, search history, photos, contacts, notes, email, etc

[ Parent | on HN ]
Re:Multiple Russia-aligned threat actors actively targeting ... by noname120 on Wednesday February 19, 2025 @05:45PM (#43108737)
How is that related in any way to Signal?
[ Parent | on HN ]
Re:Multiple Russia-aligned threat actors actively targeting ... by reactordev on Wednesday February 19, 2025 @05:56PM (#43108831)
My point is that anything you install on your device is a vector. Can install MITM attacks. Can read your data, etc. Sidecar attacks.

This was classic phishing though

[ Parent | on HN ]