US Government’s Modified Signal Clone, TeleMessage, Falls Victim to Hackers
A recent security breach has raised significant concerns regarding the safety of data on encrypted messaging platforms. A hacker successfully exploited a vulnerability in TeleMessage, a service known for providing modified versions of popular encrypted messaging apps like Signal, Telegram, and WhatsApp. This breach allowed the extraction of archived messages and sensitive data related to U.S. government officials and various companies, as reported by 404 Media.
Details of the TeleMessage Hack
The incident came to light last week when it was revealed that former U.S. National Security Adviser Mike Waltz had been using TeleMessage’s altered version of Signal. TeleMessage, which is based in Israel and owned by Smarsh, provides a solution for clients to archive communications, including voice notes, from encrypted messaging applications.
Impacted Data from the Breach
According to reports, although the messages of cabinet members and Mike Waltz were not compromised, the hacker managed to extract significant amounts of information, including:
- Contents of archived messages
- Contact information of government officials
- Backend login credentials for TeleMessage
- Data from U.S. Customs and Border Protection
- Information from crypto exchange Coinbase
- Details from financial institutions like Scotiabank
Security Flaws in Archived Chat Logs
The breach highlighted a critical flaw: the archived chat logs are not end-to-end encrypted between the modified version of Signal and the storage location utilized by TeleMessage. This lack of encryption raises serious questions about the security measures in place for sensitive communications.
Responses from Affected Parties
As of now, Smarsh, Signal, U.S. Customs and Border Protection, Coinbase, and Scotiabank have not publicly commented on the situation. The absence of a response from these entities leaves many unanswered questions regarding their data protection protocols.
For more insights on cybersecurity and data protection, explore our articles on cybersecurity best practices and data encryption methods.
