Signal security advisory (AV25-099)

Serial number: AV25-099
Date: February 21, 2025

On February 19, 2025, the Cyber Centre became aware of Signal updates containing hardened features to help protect against phishing PhishingAn attempt by a third party to solicit confidential information from an individual, group, or organization by mimicking or spoofing a specific, usually well-known brand, usually for financial gain. Phishers attempt to trick users into disclosing personal data, such as credit card numbers, online banking credentials, and other sensitive information, which they may then use to commit fraudulent acts. campaigns affecting the following products:

• Signal iOS – as of today, versions prior to 7.47 (latest version)
• Signal Android – as of today, versions prior to 7.33.2 (latest version)

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates, when available.

• Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger
• Updating Signal
• Security considerations for QR codes ITSAP.00.141
• A Signal Update Fends Off a Phishing Technique Used in Russian Espionage