This was such a weird news story to read. At least they used Signal? That's gotta be a plus at some level.
Unrelated, but I wonder how the gray hat market for Signal vulns is doing now?
Unrelated, but I wonder how the gray hat market for Signal vulns is doing now?
But, it's a flagrant leak of classified info. Using a medium explicitly prohibited by policy. And likely now lost to time (Signal messages can be configured to auto-delete on a timer), when all of this sort of correspondence is legally required to be retained.
They could've used Telegram /s. It's popular with the crypto crowd after all.
If a device has been compromised, the database can be extracted with all messages and contacts