We are aware of recent reports regarding targeted phishing attacks that have resulted in account takeovers of some Signal users, including government officials and journalists. We take this very seriously.

To be clear: Signal’s encryption and infrastructure have not been compromised and remain robust. These attacks were executed via sophisticated phishing campaigns, designed to trick users into sharing information – SMS codes and/or Signal PIN – to gain access to users’ accounts.

@signalapp You know how you could solve that? Stop taking users' phone numbers, and especially stop using it for verification. EZPZ.
@DekOfTheYautja @signalapp Or just turn off phone number discoverability and never get a spam message again: https://support.signal.org/hc/en-us/articles/6712070553754-Phone-Number-Privacy-and-Usernames#pnp
Phone Number Privacy and Usernames

Here are features to make your phone number more private on Signal. As a new default, your phone number will no longer be visible to everyone in Signal. You can opt to display your phone number. H...

Signal Support
@Avitus this is not about spam, this is about phishing.
@DekOfTheYautja No phone number discoverability means no spam, no phishing, no unwanted contact at all.
@Avitus that's not how that works. No one is discovering your phone number on Signal. They find it elsewhere and bring it there.

@DekOfTheYautja That is how it works and not what I mean by "discovering". They already have your phone number. To find you on Signal, they have to explicitly search for it. If you hide your phone number, it won't come up when they search for it, thus they can't phish you if they can't find you.

Read the support article I linked: https://support.signal.org/hc/en-us/articles/6712070553754-Phone-Number-Privacy-and-Usernames#pnp

Phone Number Privacy and Usernames

Here are features to make your phone number more private on Signal. As a new default, your phone number will no longer be visible to everyone in Signal. You can opt to display your phone number. H...

Signal Support
@Avitus there's nothing on the article you linked about searching phone numbers. Because it doesn't exist.