CISA urges switch to Signal-like encrypted messaging apps after telecom hacks

Share:

Today, CISA urged senior government and political officials to switch to end-to-end encrypted messaging apps like Signal following a wave of telecom breaches across dozens of countries, including eight carriers in the United States.

CISA and the FBI confirmed these breaches in late October after reports that the Salt Typhoon, a Chinese-backed threat group, had hacked multiple U.S. telcos, including T-Mobile, AT&T, Verizon, and Lumen Technologies. Although the timing of the breaches is unclear, the attackers reportedly had access for “months or longer.”

Also tracked as Ghost Emperor, Earth Estries, FamousSparrow, and UNC2286, Salt Typhoon has been active since at least 2019, breaching telecom companies and government entities across Southeast Asia.

While today’s guidance applies to highly targeted individuals likely possessing information of interest to the Chinese cyberspies, the measures can help anyone concerned about the telecom hacks protect their data and information from hackers who successfully breach their mobile carriers’ systems.

“Highly targeted individuals should assume that all communications between mobile devices—including government and personal devices—and internet services are at risk of interception or manipulation,” the U.S. cybersecurity agency said on Wednesday.

“CISA strongly urges highly targeted individuals to immediately review and apply the best practices provided in the guidance to protect mobile communications, including consistent use of end-to-end encryption.”

CISA Salty Typhoon guidance

Signal nominated as secure messaging alternative

In today’s advisory, CISA recommends switching to an end-to-end encrypted messaging application, naming Signal as an alternative for mobile communication across multiple mobile (iOS, Android) and desktop (macOS, Windows, and Linux) platforms.

“Adopt a free messaging application for secure communications that guarantees end-to-end encryption, such as Signal or similar apps. CISA recommends an end-to-end encrypted messaging app that is compatible with both iPhone and Android operating systems, allowing for text message interoperability across platforms,” CISA said today.

It also recommends using Fast Identity Online (FIDO) phishing-resistant multifactor authentication (MFA) together with hardware-based FIDO security keys (e.g., Yubico or Google Titan) or passkeys to secure Microsoft, Apple, and Google accounts. Where possible, options like Google’s Advanced Protection (APP) program or Apple’s Lockdown Mode should also be enabled to defend against account hijacking and phishing attacks.

Additionally, CISA advises avoiding SMS-based MFA, using a password manager to store and protect passwords from attackers, and setting up a telco PIN or passcode for sensitive operations like porting your phone number and blocking SIM swapping attempts.

The cybersecurity agency also advocates for regularly updating software to patch recently disclosed security vulnerabilities, switching to the latest available hardware for critical security features that older devices cannot provide or support, and against using commercial virtual private networks (VPNs), which might have “questionable security and privacy policies” and will increase the attack surface.

Two weeks ago, CISA and FBI officials urged Americans to use end-to-end encrypted messaging apps to minimize the risk of communications interception. They also released guidance to help telecom system admins and engineers harden their systems against Salt Typhoon attacks.

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
4:43 am, Jul 8, 2025
weather icon 13°C
L: 12° | H: 14°
few clouds
Humidity: 77 %
Pressure: 1015 mb
Wind: 11 mph WNW
Wind Gust: 0 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 20%
Rain Chance: 0%
Visibility: 10 km
Sunrise: 4:53 am
Sunset: 9:17 pm
DailyHourly
Daily ForecastHourly Forecast
Today 10:00 pm
weather icon
12° | 14°°C 0.64 mm 64% 9 mph 78 % 1019 mb 0 mm/h
Tomorrow 10:00 pm
weather icon
15° | 25°°C 0.13 mm 13% 7 mph 59 % 1022 mb 0 mm/h
Thu Jul 10 10:00 pm
weather icon
18° | 30°°C 0 mm 0% 8 mph 72 % 1023 mb 0 mm/h
Fri Jul 11 10:00 pm
weather icon
19° | 30°°C 0 mm 0% 10 mph 66 % 1022 mb 0 mm/h
Sat Jul 12 10:00 pm
weather icon
18° | 29°°C 0 mm 0% 11 mph 74 % 1020 mb 0 mm/h
Today 7:00 am
weather icon
12° | 13°°C 0.64 mm 64% 9 mph 78 % 1015 mb 0 mm/h
Today 10:00 am
weather icon
16° | 18°°C 0 mm 0% 9 mph 57 % 1017 mb 0 mm/h
Today 1:00 pm
weather icon
20° | 20°°C 0 mm 0% 7 mph 34 % 1018 mb 0 mm/h
Today 4:00 pm
weather icon
24° | 24°°C 0 mm 0% 7 mph 29 % 1017 mb 0 mm/h
Today 7:00 pm
weather icon
21° | 21°°C 0 mm 0% 7 mph 29 % 1018 mb 0 mm/h
Today 10:00 pm
weather icon
20° | 20°°C 0 mm 0% 4 mph 41 % 1019 mb 0 mm/h
Tomorrow 1:00 am
weather icon
17° | 17°°C 0 mm 0% 5 mph 48 % 1020 mb 0 mm/h
Tomorrow 4:00 am
weather icon
15° | 15°°C 0 mm 0% 4 mph 59 % 1021 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€91,907.63
-1.56%
Ethereum(ETH)
€2,160.02
-1.89%
Tether(USDT)
€0.85
-0.01%
XRP(XRP)
€1.93
-0.69%
Solana(SOL)
€126.77
-2.43%
USDC(USDC)
€0.85
0.00%
Dogecoin(DOGE)
€0.142929
-4.79%
Shiba Inu(SHIB)
€0.000010
-2.52%
Pepe(PEPE)
€0.000009
-3.70%
Scroll to Top