Conversation

In the coming weeks, you’ll see us rolling out a number of changes to help hinder these kinds of attacks. 3/

Because we don’t collect user data, what we know about these attacks comes from the victims of phishing. And from what victims have told us, the attacks followed a broad pattern: after tricking people into revealing their Signal credentials, attackers then used those credentials to take over their account and also frequently changed the associated phone number. 4/