Until Signal no longer requires phone numbers for accounts, users will be vulnerable to things like this. People have been pushing them to move to a simple username / password system for years, like every other E2EE messenger out there.

While using Signal is safer than using standard SMS, don't think for a minute you are anonymous.

1,900 Signal users’ phone numbers exposed by Twilio phishing | Ars Technica
https://arstechnica.com/information-technology/2022/08/twilio-phishing-attack-exposes-phone-numbers-for-1900-signal-users/

#cososec

@voltronic

Sidenote; Twilio is also linked with authy

@voltronic How to enable 2FA for Twilio

Install Authy

https://authy.com/guides/twilio/

Twilio, the company which owns the popular 2-factor authentication service Authy, has revealed that it has suffered a data breach. An announcement published on its website states that some of its employees fell victim to a phishing attack.

@voltronic

More here:..

https://www.google.com/amp/s/www.ghacks.net/2022/08/10/twilio-the-company-behind-authy-suffered-a-data-breach/%3famp

@ecksmc
Twilio's buyout of Authy is one reason why I stopped using that app and migrated to Ageis for 2FA. This was before the breach, but I'm glad I made the switch.

@voltronic is ageis available on multiple platforms?