Summary:


Private contact details of the most important security advisers to U.S. President Donald Trump can be found on the internet. DER SPIEGEL reporters were able to find mobile phone numbers, email addresses and even some passwords belonging to the top officials.

To do so, the reporters used commercial people search engines along with hacked customer data that has been published on the web. Those affected by the leaks include National Security Adviser Mike Waltz, Director of National Intelligence Tulsi Gabbard and Secretary of Defense Pete Hegseth.

Most of these numbers and email addresses are apparently still in use, with some of them linked to profiles on social media platforms like Instagram and LinkedIn. They were used to create Dropbox accounts and profiles in apps that track running data. There are also WhatsApp profiles for the respective phone numbers and even Signal accounts in some cases.

As such, the reporting has revealed an additional grave, previously unknown security breach at the highest levels in Washington. Hostile intelligence services could use this publicly available data to hack the communications of those affected by installing spyware on their devices. It is thus conceivable that foreign agents were privy to the Signal chat group in which Gabbard, Waltz and Hegseth discussed a military strike.


  • Australis13@fedia.io
    link
    fedilink
    arrow-up
    30
    ·
    5 days ago

    Malcolm Nance (veteran of US intelligence) discussed the Signal breach here: https://www.youtube.com/watch?v=MERwAvesX9o

    It’s not just conceivable, it’s almost guaranteed that non-US powers were listening in. These people are either incredibly stupid (and have the Dunning-Kruger over-confidence to match) or they are traitors to the US.

    • Boddhisatva@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      5 days ago

      It’s not just conceivable, it’s almost guaranteed that non-US powers were listening in.

      I don’t have time to watch a 30+ minute video, but that statement is valid. I’ve posted about this a couple times in the last two days. The Pentagon put out warnings about Signal use more than a year ago. Google put out a strong warning back in February.

      The most novel and widely used technique underpinning Russian-aligned attempts to compromise Signal accounts is the abuse of the app’s legitimate “linked devices” feature that enables Signal to be used on multiple devices concurrently. Because linking an additional device typically requires scanning a quick-response (QR) code, threat actors have resorted to crafting malicious QR codes that, when scanned, will link a victim’s account to an actor-controlled Signal instance. If successful, future messages will be delivered synchronously to both the victim and the threat actor in real-time, providing a persistent means to eavesdrop on the victim’s secure conversations without the need for full-device compromise.

      Signal security relies on user competence. The user has to be savvy enough to not fall for phishing attempts. All it would take is for one of the morons to have scanned such a QR code for that whole chat to have been compromised. I would bet big money that at least one of these fools had already done so.

      • Australis13@fedia.io
        link
        fedilink
        arrow-up
        3
        ·
        5 days ago

        Signal security relies on user competence. The user has to be savvy enough to not fall for phishing attempts. All it would take is for one of the morons to have scanned such a QR code for that whole chat to have been compromised. I would bet big money that at least one of these fools had already done so.

        Considering one of the participants of that Signal chat (Witkoff) was in Russia at the time, I think you would win that bet.

    • bean@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      5 days ago

      Well if they weren’t listening before, certainly they will now. What the fuck are they going to do to reassure the American people that they aren’t fucking this up? They can’t because they are. That’s ACTUALLY scary.

  • Nightwingdragon@lemmy.world
    link
    fedilink
    English
    arrow-up
    19
    ·
    5 days ago

    “Today, we are issuing an arrest warrant for Jeffrey Goldberg, the so-called “Signal Hacker” who infiltrated a classified group chat, gathered military information regarding operations in Yemen, and put our servicepeople at risk by publishing that information online. The Signal information he leaked has been directly tied to the release of personal information of many top United States officials and has endangered national security. He and other editors of The Atlantic are being charged with disseminating personal information of public officials, Conspiracy against the United States, and Treason. We are currently awaiting word from them to negotiate the terms of their surrender.”

    – Trump, by the time they’re done spinning this.

    Mark my words. This or something close to it will be the GOP position within 72 hours.

  • Capt. Wolf@lemmy.world
    link
    fedilink
    arrow-up
    8
    ·
    5 days ago

    Who needs security vetting procedure, amirite? The president said they’re cool, and who’s more trustworthy than the president???