Using Device Linking to Eavesdrop on WhatsApp and Signal

What happened

Netzpoltik details that police are able to gain access in this way either through physical access to someone’s phone or by intercepting verification codes via a state-sanctioned phishing (messages that impersonate someone to obtain passwords or money) attack or intercepting SMS messages via telephone surveillance. Modern messaging apps allow users to link their phone accounts to their computer desktop.

Eavesdroppers are taking advantage of this capability: Apps such as WhatsApp Web and Signal Desktop allow people to use their accounts on other devices, such as laptops or desktop computers. Germany’s Customs Office has been using these features to connect a police-controlled computer to a suspect’s account. Once connected, messages can be delivered to that computer without the police having to crack the encryption protecting them.