Using Device Linking to Eavesdrop on WhatsApp and Signal
Executive Summary
Modern messaging apps let users link phone accounts to desktop clients. German customs officers have used this feature to connect a police‑controlled computer to a suspect’s WhatsApp or Signal account, enabling them to receive messages without decrypting them. The police can gain access via physical phone possession, state‑sanctioned phishing to intercept verification codes, or telephone surveillance to capture SMS messages.
Intelligence Metadata - Source Publisher: Schneier on Security - Published Date: 2026-09-29T11:02:19+00:00 - Category: threat-intel
Original Description: Modern messaging apps allow users to link their phone accounts to their computer desktop. Eavesdroppers are taking advantage of this capability: Apps such as WhatsApp Web and Signal Desktop allow people to use their accounts on other devices, such as laptops or desktop computers. Germany’s Customs Office has been using these features to connect a police-controlled computer to a suspect’s account. Once connected, messages can be delivered to that computer without the police having ...
"Experience is simply the name we give our mistakes."
— Oscar Wilde