Software engineer and former journalist for The Intercept Micah Lee eventually managed to hunt down the source code for TM SGNL, uncovering at least one serious vulnerability, the use of hardcoded credentials.
That raised an obvious question mark about the app’s security. However, since then he and journalist Joseph Cox were contacted by a hacker who provided evidence that the company behind TM SGNL, TeleMessage, had itself suffered a data breach, they alleged in a report for 404media.
“The data stolen by the hacker contains the contents of some direct messages and group chats sent using its Signal clone, as well as modified versions of WhatsApp, Telegram, and WeChat,” Lee and Cox wrote.
This story originally appeared on Computerworld
